Cryptographic Engineer — PKI & Cloud Key Management

USA 3M Company; United States; On-site; USD 109,000 - 133,000; Full time

Benefits offered by this job

Medical insurance

Dental & Vision

Health Savings Accounts

Retirement benefits

Job summary

3M is seeking a Cryptographic Engineer to manage encryption keys, PKI, and certificate services across on-site and cloud environments. The role emphasizes coordination with IT and security teams to ensure compliant, secure operations.

The candidate will work with AWS KMS, ACM, and Venafi, with on-site work in Maplewood, MN or Austin, TX. Prior experience and relevant certifications are valued for this critical security function.

Qualifications

• High School Diploma (verified and completed prior to start) and 8 years of experience in IT, CS, Engineering, or Information Security in private/public/government/military.
• Bachelor’s degree or higher (verified and completed prior to start) and Six (6) years of experience in IT/CS/Engineering/Information Security in private/public/government/military.

Responsibilities

• Troubleshoot operational issues for encryption key and certificate related tools/services.
• Respond to client requests for encryption keys and digital certificates with on-call support.
• Manage the AWS hosted platforms used to provide centralized storage, issuance, and revocation of encryption keys and digital certificates, including installing, patching, upgrades, vulnerability management, backups, new builds, and data migrations.
• Manage the Enterprise Secure Key Lifecycle (ESKM) platform from Utimaco.
• Manage the CipherTrust Manager (CTM) platform from Thales.
• Manage the Active Directory Certificate Services (ADCS) internal PKI platform, including certificate authorities and network device enrollment.
• Manage the Venafi platform for certificate management.
• Partner with cloud platform engineering teams in support of ACM, AWS KMS and Azure Key Vault.
• Collaborate with IT and security teams to ensure compliance with security policies and best practices.

Skills

Cryptography concepts

PKI administration

Certificate management

PowerShell/Python

Cloud security

Education

Bachelor’s degree or higher

High School Diploma

Tools

Utimaco ESKM

CipherTrust CTM

ADCS PKI

Venafi

AWS KMS

Azure Key Vault

AWS ACM

Job description

3M is seeking a Cryptographic Engineer to manage encryption keys, PKI, and certificate services across on-site and cloud environments. The role emphasizes coordination with IT and security teams to ensure compliant, secure operations.

The candidate will work with AWS KMS, ACM, and Venafi, with on-site work in Maplewood, MN or Austin, TX. Prior experience and relevant certifications are valued for this critical security function.