Director - PKI Solution Engineering

The Depository Trust & Clearing Corporation (DTCC); Jersey City (NJ); Hybrid; USD 150,000 - 200,000; Full time

Benefits offered by this job

Health and life insurance

Pension / Retirement benefits

Paid Time Off

Hybrid work model (3 onsite / 2 remote

Job summary

DTCC is seeking a Senior Solution Engineer to lead PKI architecture and cryptographic trust services. You will drive modernization across internal CA platforms, automate certificate issuance, and enable cloud-native PKI capabilities for enterprise applications.

You will collaborate with engineering, security, and operations to define scalable patterns, uplift cryptographic practices, and guide teams through architectural decisions while ensuring alignment with regulatory and business needs.

Qualifications

• Minimum of 10 years of related experience.
• Bachelor's degree preferred and/or equivalent experience.

Responsibilities

• Serve as senior technical advisor for PKI and cryptographic trust services.
• Define and drive the strategic roadmap for PKI modernization.
• Lead design and modernization of internal CA platforms and trust services.
• Develop enterprise patterns for automated certificate issuance and crypto agility.
• Architect cloud-native PKI capabilities across public clouds.
• Drive automation and modernization of external PKI services.
• Lead cryptographic agility and post-quantum cryptography adoption.
• Establish PKI reference architectures and governance standards.
• Collaborate with cross-functional teams to embed cryptographic requirements.
• Mentor engineers and leads through architecture reviews.

Skills

PKI expertise

Certificate lifecycle

Cloud security

Enterprise architecture

Technical leadership

Education

Bachelor's degree

Job description

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Pay And Benefits

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact You Will Have In This Role

Being a member of IT Cybersecurity Engineering and Operations at DTCC, your purpose is to provide best-in-class and versatile security services to the enterprise. As a Senior Solution Engineer within Cybersecurity Engineering, you will serve as the technical leader for DTCC's Public Key Infrastructure (PKI) services and cryptographic trust platforms. You will be responsible for advancing the architecture, strategy, and modernization of enterprise PKI capabilities while helping DTCC prepare for the next generation of cryptographic technologies.

This role will drive the evolution of DTCC's certificate management and trust services, including modernization of internal certificate authorities, automation of external PKI ecosystems, expansion of cloud-native PKI capabilities, adoption of crypto-agile architectures, and support for post-quantum cryptography (PQC). You will partner closely with engineering, operations, security, architecture, and application teams to establish scalable patterns and standards that strengthen DTCC's security posture while enabling innovation across the enterprise.

This role is an Individual Contributor role. You will serve as the senior technical authority for PKI architecture and strategy, working alongside engineering and operations teams to define the future of enterprise cryptographic services.

Your Primary Responsibilities

• Serve as the senior technical advisor and subject matter expert for Public Key Infrastructure (PKI), certificate lifecycle management, cryptographic trust services, and enterprise certificate consumption patterns.
• Define and drive the strategic roadmap for PKI modernization, ensuring DTCC's certificate and trust infrastructure remains secure, scalable, resilient, and aligned with evolving business and regulatory requirements.
• Lead the design and modernization of internal certificate authority (CA) platforms and supporting trust services, establishing target architectures, engineering standards, and implementation roadmaps.
• Develop enterprise patterns and best practices for automated certificate issuance, ephemeral certificate usage, workload identity, machine authentication, and crypto-agile application design.
• Architect and guide the implementation of cloud-native PKI capabilities across public cloud environments, enabling secure certificate services for modern applications, platforms, and infrastructure.
• Drive the automation and modernization of external PKI services and certificate management processes, improving scalability, reliability, operational efficiency, and risk reduction.
• Lead DTCC's technical strategy for cryptographic agility and post-quantum cryptography (PQC) adoption, evaluating emerging standards, technologies, and migration approaches while defining implementation guidance for engineering teams.
• Establish PKI reference architectures, trust models, certificate governance standards, and integration patterns that support consistent adoption across enterprise platforms and applications.
• Evaluate emerging technologies, vendor solutions, and architectural approaches to strengthen DTCC's cryptographic security posture and accelerate modernization initiatives.
• Collaborate with engineering, architecture, security, infrastructure, and application teams to ensure cryptographic requirements and trust services are embedded into enterprise technology solutions.
• Act as a trusted advisor to senior technology and business leaders, communicating PKI strategy, architecture decisions, implementation risks, and modernization priorities.
• Mentor engineers, architects, and technical leads through architecture reviews, technical guidance, and knowledge sharing, helping elevate cryptographic expertise across the organization.
• Represent PKI and cryptographic trust services within enterprise architecture forums, strategic initiatives, and cross-functional programs to ensure long-term alignment with DTCC's technology and cybersecurity strategy.

NOTE: The Primary Responsibilities of this role are not limited to the details above.*

Qualifications

• Minimum of 10 years of related experience
• Bachelor's degree preferred and/or equivalent experience

Talents Needed For Success

• Deep expertise in Public Key Infrastructure (PKI), certificate authority technologies, certificate lifecycle management, cryptographic protocols, and trust architectures.
• Strong understanding of modern authentication, machine identity, workload identity, cloud security, and cryptographic automation patterns.
• Demonstrated experience designing enterprise-scale security architectures and driving large-scale modernization initiatives.
• Ability to influence technology direction through technical leadership, architecture expertise, and strategic vision.
• Presents information clearly in writing and orally in larger group settings.
• Convinces others on key topics by presenting persuasive arguments and alternative approaches.
• Inspires different approaches or ways of working.
• Inspires teams to constructively challenge established views.
• Sets an example for others by personally embracing change and building ownership through technical leadership and collaboration.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.