Cryptography Engineer — PQC & HSM Expert

BNY; Pittsburgh (Allegheny County); On-site; USD 130,000 - 210,000; Full time

Job summary

BNY is seeking a Cryptography Engineer to join our Cybersecurity team in Pittsburgh or Lake Mary. You will implement cryptography and Key Management Systems (KMS) across the enterprise and contribute to the move to Post-Quantum Cryptography (PQC).

Collaborate with cross-functional teams to determine cryptography and keys use cases, build and support HSM solutions, and create architecture and documentation. You will respond to audits and regulators on PKI while maintaining security standards.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• CISSP certification is preferred.
• 5+ years of experience installing and supporting cryptographic solutions.
• Experience with HSMs and Key Management Systems (KMS).
• Knowledge of cryptographic algorithms and key management.
• Experience with Thales product line: Thales HSM, Thales CipherTrust.

Responsibilities

• Implement and support cryptography and KMS solutions across the enterprise.
• Build, integrate, and support a Cryptographic Asset Management Platform for PQC migration.
• Partner with cross-functional teams to determine cryptography and keys use cases.
• Build and support HSM solutions.
• Create architecture, system build, procedures, and knowledge articles.
• Respond to requests from users, Internal Audit, and Federal Regulators on PKI.

Skills

Cryptography

KMS

HSM

PQ Cryptography

Regulatory compliance

Oracle Key Vault

Thales HSM

Thales CipherTrust

Automation

Tools

Security certifications

Job description

BNY is seeking a Cryptography Engineer to join our Cybersecurity team in Pittsburgh or Lake Mary. You will implement cryptography and Key Management Systems (KMS) across the enterprise and contribute to the move to Post-Quantum Cryptography (PQC).

Collaborate with cross-functional teams to determine cryptography and keys use cases, build and support HSM solutions, and create architecture and documentation. You will respond to audits and regulators on PKI while maintaining security standards.