Cryptographic Engineer - PKI, Keys & Cloud Security

3M; Minnesota; On-site; USD 109,000 - 133,000; Full time

Job summary

3M seeks a Cryptographic Engineer to manage encryption keys, certificates, and PKI services. The role involves maintaining AWS-based platforms for key and certificate lifecycle, and coordinating with IT/security on policy compliance.

You will work with ESKM, CipherTrust CTM, Venafi, and ADCS, with exposure to ACM, KMS, and Azure Key Vault. On-site in US locations, travel up to 15% may be required.

Qualifications

• High School Diploma with 8 years of IT/InfoSec experience in private/public/government environments.
• Bachelor's degree plus 6 years of IT/InfoSec experience in similar settings.

Responsibilities

• Troubleshoot encryption key and certificate tools/services issues.
• Respond to client requests for encryption keys and certificates with on-call support.
• Manage AWS hosted platforms for centralized keys/certificates storage, issuance, and revocation.
• Oversee ESKM and CTM platforms lifecycle and security.
• Administer ADCS PKI, including CAs and device enrollment.
• Manage Venafi for certificate management and collaborate with cloud teams (ACM, KMS, Azure Key Vault).
• Collaborate with IT/security to enforce policies and best practices.

Skills

AWS

PKI management

ADCS

Venafi

CTM

ESKM

PowerShell

Python

Cryptography

Cloud security

Education

High School Diploma with 8 years experience

Bachelor's degree + 6 years experience

Tools

Utimaco ESKM

CipherTrust CTM

ADCS PKI

Venafi

ACM

KMS

Azure Key Vault

Job description

3M seeks a Cryptographic Engineer to manage encryption keys, certificates, and PKI services. The role involves maintaining AWS-based platforms for key and certificate lifecycle, and coordinating with IT/security on policy compliance.

You will work with ESKM, CipherTrust CTM, Venafi, and ADCS, with exposure to ACM, KMS, and Azure Key Vault. On-site in US locations, travel up to 15% may be required.