Encryption Engineer: Secure-by-Design & Automation

State Street; Devon (PA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Comprehensive benefits

Job summary

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into SDLC and CI/CD pipelines, transforming security into a scalable engineering capability. The role blends software engineering, automation, cloud, and cybersecurity with cryptography to standardize encryption across platforms.

The ideal candidate will influence engineering practices, build reusable security capabilities, and partner with developers, architects, and platform teams to ensure

Qualifications

• Bachelor’s degree or equivalent practical experience in CS/IT/security.
• 8+ years experience in software engineering, DevSecOps, platform engineering, cloud engineering, or cybersecurity.
• Experience integrating security controls into SDLC processes, CI/CD pipelines, and modern software delivery platforms.
• Working knowledge of encryption technologies, cryptographic key management, secrets management, and certificate lifecycle management.
• Experience implementing security automation within development pipelines using tools such as Harness, Jenkins, or similar platforms.
• Hands-on experience with Infrastructure-as-Code technologies, including Terraform, CloudFormation, or equivalent automation frameworks.
• Proficiency in programming languages such as Python, Java, Go, C#, JavaScript, TypeScript, PowerShell, or Bash.
• Experience with cloud platforms including Azure, AWS, OCI, or GCP.
• Familiarity with Kubernetes, OpenShift, and cloud-native architectures.
• Understanding of software architecture, secure coding, and developer enablement methodologies.
• Knowledge of NIST, PCI DSS, ISO 27001, or equivalent standards.
• Experience with key management, HSMs, or cloud KMS is desirable.
• Relevant certifications such as CISSP, CCSP, Azure Security Engineer, AWS Security Specialty, or CK(S) are a plus.

Responsibilities

• Embed encryption and key management controls into SDLC, DevSecOps pipelines, and platform patterns.
• Design and implement secure-by-default encryption capabilities for application teams.
• Develop reusable automation, APIs, templates, IaC modules, and reference architectures.
• Integrate enterprise key management, secrets management, and encryption services into CI/CD workflows.
• Establish automated guardrails and policy-driven controls throughout the SDLC.
• Define architectural review triggers for non-conforming designs and address risks early.
• Partner with development, platform, cloud, and architecture teams to implement cryptographic standards.
• Create standards, guidance, and developer enablement materials for encryption adoption.
• Improve Encryption-by-Design through automation and self-service adoption.
• Monitor encryption implementations to identify gaps and drive remediation.
• Support regulatory, audit, and risk management with automated evidence.

Skills

Python

Java

Go

C#

JavaScript

TypeScript

PowerShell

Bash

Education

Bachelor’s degree in Computer Science, Information Security, Software Engineering, Information Technology, Cybersecurity, or related discipline

CISSP

CCSP

CKS – Certified Kubernetes Security Specialist

Azure Security Engineer Associate

AWS Security Specialty

Tools

Terraform

CloudFormation

Harness

Jenkins

Job description

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into SDLC and CI/CD pipelines, transforming security into a scalable engineering capability. The role blends software engineering, automation, cloud, and cybersecurity with cryptography to standardize encryption across platforms.

The ideal candidate will influence engineering practices, build reusable security capabilities, and partner with developers, architects, and platform teams to ensure