Director - PKI Solution Engineering

Depository Trust & Clearing Corporation; Jersey City (NJ); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Health and life insurance

Pension / Retirement benefits

Flexible/hybrid model (onsite 3 days,

Job summary

DTCC is seeking a Senior Solution Engineer in IT Cybersecurity Engineering and Operations to lead PKI strategy and modernize certificate infrastructure. You will drive cryptographic trust services, modernize internal PKI, automate certificate issuance, and guide cloud-native PKI initiatives across the enterprise.

You will collaborate with engineering and security teams to define architectures, governance, and migration plans while mentoring staff and serving as the technical authority on

Qualifications

• Minimum of 10 years of related experience.
• Bachelor's degree preferred and/or equivalent experience.

Responsibilities

• Serve as the senior technical advisor for PKI and cryptographic trust services.
• Define and drive the strategic roadmap for PKI modernization.
• Lead the design and modernization of internal CA platforms and trust services.
• Develop enterprise patterns for automated certificate issuance and ephemeral certificate usage.
• Architect and guide cloud-native PKI across public cloud environments.
• Drive automation and modernization of external PKI services and certificate management.
• Lead cryptographic agility and PQC adoption with guidance for engineering teams.
• Establish PKI reference architectures and governance standards.
• Collaborate with teams to embed cryptographic requirements in solutions.
• Mentor engineers and technical leads through architecture reviews.

Skills

PKI

Certificate lifecycle

Cryptographic trust

Cloud security

Machine identity

Workload identity

Crypto automation

PKI architecture

Leadership

Strategy

Education

Bachelor's degree or equivalent

Tools

PKI platforms

Job description

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

Pay and Benefits

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact You Will Have in This Role

Being a member of IT Cybersecurity Engineering and Operations at DTCC, your purpose is to provide best-in-class and versatile security services to the enterprise. As a Senior Solution Engineer within Cybersecurity Engineering, you will serve as the technical leader for DTCC's Public Key Infrastructure (PKI) services and cryptographic trust platforms. You will be responsible for advancing the architecture, strategy, and modernization of enterprise PKI capabilities while helping DTCC prepare for the next generation of cryptographic technologies.

This role will drive the evolution of DTCC's certificate management and trust services, including modernization of internal certificate authorities, automation of external PKI ecosystems, expansion of cloud-native PKI capabilities, adoption of crypto-agile architectures, and support for post-quantum cryptography (PQC). You will partner closely with engineering, operations, security, architecture, and application teams to establish scalable patterns and standards that strengthen DTCC's security posture while enabling innovation across the enterprise.

This role is an Individual Contributor role. You will serve as the senior technical authority for PKI architecture and strategy, working alongside engineering and operations teams to define the future of enterprise cryptographic services.

Your Primary Responsibilities

• Serve as the senior technical advisor and subject matter expert for Public Key Infrastructure (PKI), certificate lifecycle management, cryptographic trust services, and enterprise certificate consumption patterns.
• Define and drive the strategic roadmap for PKI modernization, ensuring DTCC's certificate and trust infrastructure remains secure, scalable, resilient, and aligned with evolving business and regulatory requirements.
• Lead the design and modernization of internal certificate authority (CA) platforms and supporting trust services, establishing target architectures, engineering standards, and implementation roadmaps.
• Develop enterprise patterns and best practices for automated certificate issuance, **ephemeral certificate usage, workload identity, machine authentication, and crypto-agile application design.**
• Architect and guide the implementation of cloud-native PKI capabilities across public cloud environments, enabling secure certificate services for modern applications, platforms, and infrastructure.
• Drive the automation and modernization of external PKI services and certificate management processes, improving scalability, reliability, operational efficiency, and risk reduction.
• Lead DTCC's technical strategy for cryptographic agility and post-quantum cryptography (PQC) adoption, evaluating emerging standards, technologies, and migration approaches while defining implementation guidance for engineering teams.
• Establish PKI reference architectures, trust models, certificate governance standards, and integration patterns that support consistent adoption across enterprise platforms and applications.
• Evaluate emerging technologies, vendor solutions, and architectural approaches to strengthen DTCC's cryptographic security posture and accelerate modernization initiatives.
• Collaborate with engineering, architecture, security, infrastructure, and application teams to ensure cryptographic requirements and trust services are embedded into enterprise technology solutions.
• Act as a trusted advisor to senior technology and business leaders, communicating PKI strategy, architecture decisions, implementation risks, and modernization priorities.
• Mentor engineers, architects, and technical leads through architecture reviews, technical guidance, and knowledge sharing, helping elevate cryptographic expertise across the organization.
• Represent PKI and cryptographic trust services within enterprise architecture forums, strategic initiatives, and cross-functional programs to ensure long-term alignment with DTCC's technology and cybersecurity strategy.

NOTE: The Primary Responsibilities of this role are not limited to the details above.*

Qualifications

• Minimum of 10 years of related experience
• Bachelor's degree preferred and/or equivalent experience

Talents Needed for Success

• Deep expertise in Public Key Infrastructure (PKI), certificate authority technologies, certificate lifecycle management, cryptographic protocols, and trust architectures.
• Strong understanding of modern authentication, machine identity, workload identity, cloud security, and cryptographic automation patterns.
• Demonstrated experience designing enterprise-scale security architectures and driving large-scale modernization initiatives.
• Ability to influence technology direction through technical leadership, architecture expertise, and strategic vision.
• Presents information clearly in writing and orally in larger group settings.
• Convinces others on key topics by presenting persuasive arguments and alternative approaches.
• Inspires different approaches or ways of working.
• Inspires teams to constructively challenge established views.
• Sets an example for others by personally embracing change and building ownership through technical leadership and collaboration.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.