Encryption Engineer: Secure-by-Design DevSecOps

State Street; Berwyn (PA); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into SDLC and CI/CD pipelines across cloud and on-premises environments. You will design secure-by-default capabilities, build reusable automation, and drive policy-driven security across engineering teams.

Leverage experience with cryptography, IAM, and enterprise KMS to advance our Encryption-by-Design program and support regulatory compliance through automated evidence and standardized patterns.

Qualifications

• 8+ years of experience in software engineering, DevSecOps, platform engineering, or related field.
• Experience integrating security controls into SDLC processes and CI/CD pipelines.
• Knowledge of encryption technologies, cryptographic key management, secrets management, and certificate lifecycle management.
• Experience with security automation in development pipelines (Harness/Jenkins).
• Hands-on with IaC such as Terraform or CloudFormation.
• Programming languages: Python/Java/Go/C#/JavaScript/TypeScript/PowerShell/Bash.
• Cloud platforms: Azure/AWS/OCI/GCP.
• Familiar with Kubernetes/OpenShift and cloud-native architectures.
• Understanding of security frameworks (NIST, PCI DSS, ISO 27001).
• Experience with enterprise KMS, HSMs, and certificate management.

Responsibilities

• Embed encryption and key management into SDLC, DevSecOps pipelines, and platform patterns.
• Design and implement secure-by-default encryption capabilities.
• Develop reusable automation, APIs, templates, IaC modules, and reference architectures.
• Integrate key management, secrets, certificate management into CI/CD workflows.
• Establish automated guardrails and policy-driven encryption controls.
• Define architecture review triggers for non-conforming designs.
• Collaborate with engineering teams to apply cryptographic standards across environments.
• Create standards, guidance, and developer enablement materials for encryption adoption.
• Improve Encryption-by-Design program through automation and self-service.
• Monitor encryption implementations for gaps and remediation opportunities.
• Support regulatory, audit, and risk management with automated evidence.

Skills

Security engineering

DevSecOps

SDLC security

Encryption tech

Key management

CI/CD security

Programming: Python

Cloud security

Kubernetes

Security architecture

Regulatory standards

Education

Bachelor’s degree in CS / Info Security / related

CISSP

CCSP

Azure Security Engineer Associate

AWS Security Specialty

CKS

Tools

Harness

Jenkins

Terraform

CloudFormation

OpenShift

Job description

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into SDLC and CI/CD pipelines across cloud and on-premises environments. You will design secure-by-default capabilities, build reusable automation, and drive policy-driven security across engineering teams.

Leverage experience with cryptography, IAM, and enterprise KMS to advance our Encryption-by-Design program and support regulatory compliance through automated evidence and standardized patterns.