Encryption Engineer: DevSecOps for Secure-by-Design SDLC

State Street; Quincy (MA); On-site; USD 121,500 - 202,500; Full time

Benefits offered by this job

401K with company match

Medical/Dental/Vision Insurance

Paid time off

Job summary

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into SDLC, DevSecOps pipelines, and platform engineering patterns across the enterprise. This role blends software engineering, automation, cloud, and cybersecurity with a focus on cryptography and data protection principles.

The ideal candidate collaborates with developers, architects, and platform teams to ensure encryption is implemented consistently at scale, while advancing Automation and

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• 8+ years of software engineering, DevSecOps, platform engineering, cloud engineering, or cybersecurity.
• Experience integrating security controls into SDLC processes, CI/CD pipelines, and modern software delivery platforms.
• Working knowledge of encryption technologies, cryptographic key management, secrets management, certificate lifecycle management, and data protection controls.
• Experience implementing security automation within development pipelines using tools such as Harness, Jenkins, or similar platforms.
• Hands-on experience with Infrastructure-as-Code technologies such as Terraform, CloudFormation, or equivalent.
• Proficiency in programming/scripting languages like Python, Java, Go, C#, JavaScript, TypeScript, PowerShell, or Bash.
• Experience with cloud platforms (Azure, AWS, OCI, GCP) and containerization (Kubernetes, OpenShift).
• Understanding of software architecture, secure coding practices, app security testing, and developer enablement methodologies.
• Knowledge of security/compliance frameworks (NIST, PCI DSS, ISO 27001).
• Experience with enterprise key management platforms, HSMs, cloud KMS, secrets management, or certificate management is desirable.
• Certifications such as CISSP, CCSP, Azure Security Engineer, AWS Security Specialty, CKS are a plus.

Responsibilities

• Embed enterprise encryption and key management controls into SDLC, DevSecOps pipelines, and platform patterns to ensure security-by-design from the start.
• Design and implement secure-by-default encryption capabilities enabling application teams to adopt approved cryptographic controls with minimal effort.
• Develop and maintain reusable automation, APIs, templates, and IaC modules to accelerate encryption adoption enterprise-wide.
• Integrate encryption services into standard developer workflows and CI/CD toolchains.
• Establish automated guardrails and policy-driven controls that validate encryption requirements across the SDLC.
• Define architectural review triggers for non-conforming designs and address risks early in design.
• Collaborate with development, platform, cloud, and architecture teams to implement approved cryptographic standards.
• Create technical standards, implementation guidance, and developer enablement materials for encryption and key management.
• Improve the Encryption-by-Design program through automation, reducing manual reviews and increasing self-service adoption.
• Monitor and assess encryption implementations to identify gaps and drive remediation and standardization.
• Support regulatory, audit, and risk initiatives with measurable encryption controls and automated evidence.
• Drive adoption by modernizing legacy encryptions and aligning new solutions with standards.
• Reduce fragmentation and risk by embedding cryptographic controls into development processes rather than manual remediation.
• Speed up compliant onboarding and delivery by providing reusable security capabilities.

Skills

Python

Java

Go

C#

JavaScript

TypeScript

PowerShell

Bash

DevSecOps

Security automation

Education

Bachelor's degree in Computer Science

Equivalent practical experience

Tools

Terraform

CloudFormation

Harness

Jenkins

Kubernetes

OpenShift

CI/CD tooling

Job description

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into SDLC, DevSecOps pipelines, and platform engineering patterns across the enterprise. This role blends software engineering, automation, cloud, and cybersecurity with a focus on cryptography and data protection principles.

The ideal candidate collaborates with developers, architects, and platform teams to ensure encryption is implemented consistently at scale, while advancing Automation and