Director of Cryptographic Architecture & Engineering

American Express; New York (NY); Sur place; USD 180 000 - 260 000; Plein temps

Résumé du poste

American Express is seeking a senior cryptographic architect to shape secure cryptographic patterns across payments, data, and cloud environments. You will lead post-quantum readiness, design PKI and HSM-based solutions, and mentor teams in secure engineering practices.

The role emphasizes architecture-as-code, cryptographic telemetry, and collaboration with risk, product, and engineering to advance enterprise security capabilities.

Qualifications

• Significant experience in cryptographic engineering or security architecture.
• Deep knowledge of symmetric/asymmetric cryptography, TLS, and key exchange.
• Experience with HSMs, PKI, and cryptographic lifecycle management.
• Ability to translate security needs into architecture-as-code and reusable patterns.

Responsabilités

• Define enterprise cryptographic architecture and strategic patterns across environments.
• Lead post-quantum cryptography readiness and crypto-agility initiatives.
• Provide architecture leadership for payment cryptography, including HSMs and key management.
• Design modern encryption, PKI, and cloud-native cryptography solutions.
• Translate Data Security standards into architecture-as-code and reusable patterns.
• Mentor engineers and collaborate with risk, product, and cybersecurity teams.
• Integrate cryptographic requirements and telemetry into the SDLC and governance processes.
• Drive adoption of enterprise cryptographic services and modernization programs.
• Assess cryptographic risk based on data sensitivity and threat landscape.

Connaissances

Cryptography

Cybersecurity architecture

HSMs

PKI

Cloud KMS

Post-quantum cryptography

Threat modeling

Outils

HSM management

KMS

Description du poste

American Express is seeking a senior cryptographic architect to shape secure cryptographic patterns across payments, data, and cloud environments. You will lead post-quantum readiness, design PKI and HSM-based solutions, and mentor teams in secure engineering practices.

The role emphasizes architecture-as-code, cryptographic telemetry, and collaboration with risk, product, and engineering to advance enterprise security capabilities.