Encryption‑as‑a‑Service (EaaS) Platform Engineer

State Street; Berwyn (PA); On-site; USD 125,000 - 215,000; Full time

Benefits offered by this job

401K match

Medical insurance

Paid time off

Employee Assistance Program

Job summary

State Street seeks a security-minded technology professional with encryption, key management, cybersecurity, and platform engineering experience. You will advance enterprise encryption capabilities across cloud and on-prem environments, while enabling secure, scalable solutions.

You will partner with cross-functional teams to design, implement, and support standardized encryption services, ensuring compliance and operational excellence across the organization.

Qualifications

• Bachelor's degree in a related field or equivalent work experience.
• 5+ years in cybersecurity, infra/cloud/platform engineering, or related roles.
• Experience with encryption, key management, and cloud security solutions.
• Familiarity with AWS, Azure, or GCP and scripting/automation.

Responsibilities

• Design, implement, and support enterprise encryption and key management services.
• Collaborate with application, infrastructure, and platform teams to onboard use cases.
• Develop self-service capabilities, automation, and operational processes.
• Create and maintain service documentation, onboarding procedures, and runbooks.
• Integrate with centralized key management platforms and cloud KMS services.
• Monitor performance, troubleshoot, and drive timely resolutions.
• Support compliance with cybersecurity policies and regulatory requirements.
• Drive evaluations and automation initiatives to improve reliability and customer experience.
• Advise development and infra teams on encryption best practices.

Skills

Encryption

Key management

Cybersecurity

Platform engineering

Cloud services

REST APIs

CI/CD

Terraform

Docker

Kubernetes

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Terraform

Ansible

Jenkins

Git

Docker

Kubernetes

Job description

Who We Are Looking For

We are seeking a security-minded technology professional with experience in encryption, key management, cybersecurity, and platform engineering who is passionate about protecting data and enabling secure technology solutions. The ideal candidate combines technical expertise with strong collaboration skills and is comfortable working across engineering, infrastructure, cloud, and application teams.

Who We Are Looking For

We are seeking a security-minded technology professional with experience in encryption, key management, cybersecurity, and platform engineering who is passionate about protecting data and enabling secure technology solutions. The ideal candidate combines technical expertise with strong collaboration skills and is comfortable working across engineering, infrastructure, cloud, and application teams.

This individual will play an important role in advancing enterprise encryption capabilities by helping design, implement, integrate, and support standardized encryption and key management services. They should be capable of working independently on assigned initiatives while partnering with senior team members to drive adoption of secure, scalable, and user-friendly solutions.

What You Will Be Responsible For

• Support the development, implementation, and ongoing enhancement of enterprise encryption and key management services across cloud and on-premises environments.
• Partner with application, infrastructure, and platform teams to onboard new use cases and integrate centralized encryption and key management capabilities into business solutions.
• Contribute to the design and implementation of self-service capabilities, automation, and operational processes that improve the scalability and usability of encryption services.
• Assist in defining and maintaining service documentation, onboarding procedures, support models, and operational runbooks.
• Implement and support integrations with centralized key management platforms, cloud-native key management services, and related cryptographic technologies.
• Monitor service performance, troubleshoot issues, and coordinate with stakeholders to drive timely resolution of operational and technical challenges.
• Support compliance with cybersecurity policies, technical standards, and regulatory requirements related to data protection, encryption, and key management.
• Participate in technology evaluations, process improvements, and automation initiatives that enhance service reliability, efficiency, and customer experience.
• Serve as a trusted partner to development and infrastructure teams by providing guidance on encryption best practices, onboarding requirements, and service consumption patterns.

What We Value

• Experience working with cybersecurity, cloud, infrastructure, or platform engineering technologies.
• Understanding of encryption, key management, certificates, secrets management, or related security controls.
• Strong analytical and problem-solving skills with the ability to work through complex technical issues.
• Ability to collaborate effectively across multiple teams and communicate technical concepts to both technical and non-technical stakeholders.
• A continuous improvement mindset with an interest in automation, process optimization, and operational excellence.
• Strong organizational skills and the ability to manage multiple priorities simultaneously.
• A customer-focused approach with a commitment to delivering reliable and scalable technology services.
• Curiosity, initiative, and a desire to continuously expand technical and business knowledge.

Education & Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent work experience.
• 5+ years of experience in cybersecurity, infrastructure engineering, cloud engineering, platform engineering, application development, or related technology functions.
• Experience supporting or implementing encryption, key management, secrets management, certificate management, or cloud security solutions.
• Familiarity with cloud platforms such as AWS, Microsoft Azure, OCI, or Google Cloud Platform.
• Experience developing scripts and automation solutions using languages such as Python, PowerShell, Bash, Java, C#, or Go.
• Working knowledge of REST APIs, API integrations, and service-based architectures.
• Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Jenkins, Harness, or similar CI/CD platforms.
• Familiarity with source control and software development practices using tools such as Git, Bitbucket, or JFog.
• Experience working with container and cloud-native technologies such as Docker, Kubernetes, OpenShift, or cloud-native platform services is desirable.
• Understanding of software development frameworks and application architectures, including Spring Boot, microservices, and event-driven architectures, is a plus.
• Knowledge of security frameworks, risk management principles, secure coding practices, and cybersecurity best practices.
• Familiarity with cloud-native key management and secrets management technologies, including AWS KMS, Azure Key Vault, Google Cloud KMS, Fortanix DSM, or similar platforms, is preferred.
• Industry certifications such as AWS Cloud Practitioner, AWS Security Specialty, Azure Security Engineer Associate, CISSP, or equivalent are a plus.
• Experience working in a regulated industry, financial services environment, or large enterprise organization is preferred.

Salary Range

$125,000 - $215,000 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Job ID: R-795165