Encryption Engineer: Secure-by-Design DevSecOps

State Street; Austin (TX); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management controls into SDLC, CI/CD pipelines, and enterprise platform patterns. You will design secure-by-default encryption capabilities and develop reusable automation, APIs, and IaC modules to accelerate enterprise adoption.

The role requires 8+ years in software engineering/DevSecOps, hands-on cryptography, cloud security, and experience with security automation in development pipelines.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Software Engineering, Information Technology, Cybersecurity, or related field.
• 8+ years in software engineering, DevSecOps, platform/cloud engineering, or cybersecurity.
• Experience integrating security controls into SDLC, CI/CD, and modern delivery platforms.
• Hands-on with encryption technologies, key management, secrets, and certificate lifecycle management.
• Automation within development pipelines using Harness, Jenkins, or similar platforms.
• Infrastructure-as-Code: Terraform, CloudFormation or equivalent.
• Proficiency in Python, Java, Go, C#, JavaScript/TypeScript, PowerShell or Bash.
• Experience with AWS, Azure, OCI, or GCP; Kubernetes/OpenShift; cloud-native architectures.
• Familiarity with security frameworks (NIST, PCI DSS, ISO 27001).
• Experience with KMS, HSMs, secrets management, or certificate management solutions are desirable.

Responsibilities

• Embed encryption and key management into SDLC, DevSecOps pipelines, and platform patterns.
• Design and implement secure-by-default encryption capabilities for developers.
• Develop reusable automation, APIs, IaC modules, and reference architectures for enterprise encryption adoption.
• Integrate enterprise key management, secrets, certificates into CI/CD workflows.
• Establish automated guardrails and policy-driven encryption controls across the lifecycle.
• Define architectural review triggers for non-conforming designs and address risks early.
• Collaborate with various engineering teams to deploy approved cryptographic standards across environments.
• Create standards, guidance, and developer enablement materials for encryption adoption.
• Improve Encryption-by-Design program through automation and self-service.
• Monitor encryption implementations to identify gaps and standardize practices.

Skills

Encryption

DevSecOps

SDLC

Automation

Cryptography

Cloud security

Security engineering

Threat modeling

Education

Bachelor's degree in CS/InfoSec/Software Eng

Tools

Harness

Jenkins

Terraform

CloudFormation

Kubernetes

Job description

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management controls into SDLC, CI/CD pipelines, and enterprise platform patterns. You will design secure-by-default encryption capabilities and develop reusable automation, APIs, and IaC modules to accelerate enterprise adoption.

The role requires 8+ years in software engineering/DevSecOps, hands-on cryptography, cloud security, and experience with security automation in development pipelines.