Encryption Engineer: DevSecOps & SDLC Automation

STATE STREET CORPORATION; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street Corporation is seeking a seasoned Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into the software lifecycle across cloud and on‑prem environments. The role emphasizes automation, reusable security capabilities, and secure-by-design patterns to enable rapid, compliant application delivery.

The candidate will design secure cryptographic controls, drive enterprise-wide adoption, and partner with engineering, cloud, and architecture teams to standardize

Qualifications

• Bachelor's degree in Computer Science, Information Security, Software Engineering, Information Technology, Cybersecurity, or related discipline.
• 8+ years of experience in software engineering, DevSecOps, platform/cloud engineering, or related field.
• Experience integrating security controls into SDLC processes, CI/CD pipelines, and modern software delivery platforms.
• Hands-on experience with Infrastructure-as-Code technologies (Terraform, CloudFormation).
• Proficiency in Python, Java, Go, C#, JavaScript, TypeScript, PowerShell, or Bash.

Responsibilities

• Embed encryption and key management controls into SDLC, DevSecOps pipelines, and platform patterns.
• Design and implement secure-by-default encryption capabilities and reusable automation.
• Create automation, APIs, IaC modules, and reference architectures to accelerate encryption adoption.
• Integrate key management, secrets management, and encryption services into CI/CD toolchains.
• Establish automated guardrails and policy-driven controls to validate encryption throughout the SDLC.

Skills

Security engineering

DevSecOps

Cloud engineering

Programming languages

Terraform

Kubernetes

CI/CD pipelines

Encryption technologies

Key management

HSMs

Education

Bachelor's degree (CS/InfoSec/SE)

Tools

Terraform

CloudFormation

Kubernetes

Job description

State Street Corporation is seeking a seasoned Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into the software lifecycle across cloud and on‑prem environments. The role emphasizes automation, reusable security capabilities, and secure-by-design patterns to enable rapid, compliant application delivery.

The candidate will design secure cryptographic controls, drive enterprise-wide adoption, and partner with engineering, cloud, and architecture teams to standardize