Cryptographic Key Management Operations Engineer, Vice President, Hybrid

State Street in; Quincy (MA); Hybrid; USD 90,000 - 150,000; Full time

Job summary

An innovative firm is seeking a Cryptographic Key Management Operations Engineer to enhance the security and efficiency of key lifecycle processes. This pivotal role involves supporting the secure management of cryptographic keys across diverse environments, ensuring compliance with industry regulations. You'll collaborate with cross-functional teams to drive automation and operational excellence, while also staying abreast of emerging technologies and security threats. Join a dynamic team dedicated to digital transformation and make a significant impact on business-critical operations and financial transactions.

Qualifications

• 3+ years of experience in key management operations within regulated environments.
• Expertise in cryptographic key lifecycle management including PKI and HSMs.

Responsibilities

• Support daily cryptographic key management operations ensuring compliance with regulations.
• Collaborate with security and cloud teams to integrate cryptographic services.

Skills

Enterprise Key Management Solutions

Cryptographic Security

IoT Device Security

SIEM Tools

Education

Bachelor's Degree in Computer Science

Security Certifications (CISM, CISSP)

Tools

AWS KMS

Azure Key Vault

HashiCorp Vault

JIRA

Confluence

Job description

Cryptographic Key Management Operations Engineer, Vice President, Hybrid (Finance)

Who we are looking for

State Street is seeking a Cryptographic Key Management Operations Engineer to support the end-to-end lifecycle management of cryptographic keys across cloud, on-premises, infrastructure, and IoT environments. This role ensures the secure generation, distribution, rotation, revocation, and retirement of encryption keys while maintaining compliance with regulatory and security policies. The Key Operations Engineer will drive operational excellence and automation to enhance key lifecycle processes. This role requires close collaboration with security, IT, cloud, infrastructure, and application teams to maintain the availability, reliability, and security of key management services, supporting business-critical operations and financial transactions.

This role can be performed in a hybrid model, allowing a balance between remote work and office presence based on role requirements.

What you will be responsible for

• Supporting daily cryptographic key management operations, ensuring compliance with industry regulations such as PCI DSS, GDPR, FIPS 140-2/3.
• Driving the secure generation, storage, distribution, rotation, revocation, and retirement of encryption keys across various environments.
• Monitoring and responding to key management incidents, including key compromise, expiration, or policy violations, with timely remediation.
• Maintaining the availability, integrity, and security of key management infrastructure, troubleshooting incidents, and ensuring SLA adherence.
• Collaborating with security, cloud, infrastructure, and DevSecOps teams to integrate cryptographic services into enterprise applications and security frameworks.
• Optimizing and automating key management processes using APIs, KMS platforms, security orchestration tools, and IaC methodologies.
• Ensuring high availability and reliability of key management services to support secure transactions and data protection.
• Developing and maintaining documentation of key management processes, procedures, and workflows.
• Providing reports and analysis on key usage, compliance, performance, and risks to leadership and auditors.
• Staying informed about emerging cryptographic technologies, security threats, and regulatory changes to evolve practices accordingly.

What we value

These skills will help you succeed in this role:

• Experience with enterprise key management solutions (AWS KMS, Azure Key Vault, HashiCorp Vault, OCI KMS).
• Familiarity with financial security regulations and standards, such as PCI DSS, FIPS 140-2/3, and NIST guidelines.
• Experience with IoT device security and embedded encryption techniques.
• Experience with SIEM tools for key access monitoring.

Education & Preferred Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field, or equivalent work experience.
• 3+ years of experience in key management operations, cryptographic security, or information security within regulated environments.
• Expertise in cryptographic key lifecycle management, including symmetric/asymmetric encryption, PKI, and HSMs.
• Security certifications such as CISM, CISSP, CCSP, AWS Security Specialty.
• Experience with post-quantum cryptography (PQC) readiness and emerging frameworks.
• Experience with JIRA and Confluence.

Additional requirements

Travel up to 10% may be required.

Are you the right candidate? Yes!

We value diverse backgrounds and experiences. You don't need to meet every listed requirement to apply. If you thrive on change, innovation, see the bigger picture, make data-driven decisions, and are a team player, you could be a great fit.

Why this role is important to us

Our Global Technology Services (GTS) team is vital to State Street, enabling us to deliver data and insights to clients. We are driving digital transformation using cloud, AI, and automation, and seek top technical talent to innovate and grow.

Join us to develop your skills, solve real problems, and impact the industry.