Cryptographic Systems Engineer – PKI, Automation & PQC

Citizens; Woodbridge Township (NJ); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

Retirement plan

Parental leave

Flexible work arrangements

Education reimbursement

Wellness program

Job summary

Citizens is seeking a Cryptographic Engineer to lead hands-on work across PKI, TLS, KMS, and PQC readiness. You will reinforce cryptographic services, automate certificate management, and collaborate with cloud and security teams to reduce risk and improve operational stability.

The role emphasizes on-premises and cloud cryptographic platforms, with a focus on automation, incident response, and secure key management for enterprise environments.

Qualifications

• 3+ years in Information Security, PKI, Cryptography, or Security Engineering.
• Experience implementing enterprise certificate management solutions.
• Knowledge of TLS/X.509, PKI concepts, and key management.
• HSMs experience.

Responsibilities

• Support and enhance enterprise cryptographic platforms (PKI, TLS, KMS, HSMs).
• Manage certificate lifecycle: issuance, renewal, revocation, validation.
• Implement cryptographic automation and risk reduction.
• Assist with cloud-based KMS integration (AWS/Azure).
• Troubleshoot crypto service disruptions and incidents.
• Develop REST API integrations for certificate/key management.
• Participate in PQC readiness initiatives.

Skills

PKI concepts

TLS certificates

X.509 certificates

HSMs

Cryptography

Certificate lifecycle

Key management

Python scripting

PowerShell scripting

Bash scripting

REST API integrations

Tools

Venafi TLS Protect

Thales CipherTrust

Luna HSM

AWS KMS

Azure Key Vault

ServiceNow

Job description

Citizens is seeking a Cryptographic Engineer to lead hands-on work across PKI, TLS, KMS, and PQC readiness. You will reinforce cryptographic services, automate certificate management, and collaborate with cloud and security teams to reduce risk and improve operational stability.

The role emphasizes on-premises and cloud cryptographic platforms, with a focus on automation, incident response, and secure key management for enterprise environments.