DevSecOps Encryption Engineer — Secure-by-Design

State Street; Princeton (NJ); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K

Insurance coverage

Paid time off

Employee Assistance Program

Job summary

State Street is seeking an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into the SDLC and pipelines. You will drive secure-by-design practices across platform engineering and development teams, enabling scalable, automated cryptographic controls enterprise-wide.

The role combines software engineering, automation, cloud, and cybersecurity with a focus on cryptography, developer enablement, and regulatory compliance in a fast-paced environment.

Qualifications

• Bachelor's degree or equivalent practical experience in a technical field.
• 8+ years of experience in software engineering, DevSecOps, platform engineering, cloud engineering, or cybersecurity engineering.
• Experience integrating security controls into SDLC processes, CI/CD pipelines, and modern software delivery platforms.

Responsibilities

• Embed enterprise encryption and key management controls into SDLC processes, DevSecOps pipelines, and platform engineering patterns.
• Design and implement secure-by-default encryption capabilities for application teams.
• Develop and maintain reusable automation, APIs, templates, IaC modules, and reference architectures.
• Integrate encryption services into standard developer workflows and CI/CD toolchains.
• Establish automated guardrails and policy-driven controls for encryption throughout the SDLC.
• Define architectural review triggers for non-conforming designs and address encryption risks early.

Education

Bachelor's degree in Computer Science, Information Security, Software Engineering, Information Technology, Cybersecurity, or related discipline

Tools

Terraform

CloudFormation

Harness

Jenkins

OpenShift

Kubernetes

Job description

State Street is seeking an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into the SDLC and pipelines. You will drive secure-by-design practices across platform engineering and development teams, enabling scalable, automated cryptographic controls enterprise-wide.

The role combines software engineering, automation, cloud, and cybersecurity with a focus on cryptography, developer enablement, and regulatory compliance in a fast-paced environment.