Encryption Platform Engineer: Cloud Key Management Specialist

State Street Bank; Quincy, New York, Berwyn (MA, NY, PA); On-site; GBP 60,000 - 90,000; Full time

Job summary

State Street Bank is hiring an Encryption-as-a-Service (EaaS) Platform Engineer to advance encryption and key management across cloud and on‑premises environments, including Edinburgh, London, and other major locations.

In this full‑time role you will partner with application, infrastructure, and platform teams to onboard use cases, build automation, and improve service reliability, documentation, and security posture for data protection.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field, or equivalent work experience.
• At least 5 years of experience in cybersecurity, infrastructure engineering, cloud engineering, platform engineering, application development, or related technology.
• Experience with encryption, key management, certificates, secrets management, or cloud security solutions.
• Familiarity with AWS, Azure, OCI, or Google Cloud Platform; scripting and automation with Python, PowerShell, Bash, Java, C#, or Go; REST APIs; infrastructure-as-code and automation tools such as Terraform, Ansible, Jenkins, or Harness; and source control tools such as Git or Bitbucket.
• Desirable: Docker, Kubernetes, OpenShift, cloud-native platforms, Spring Boot, microservices, event-driven architectures, security frameworks, risk management, secure coding, cybersecurity best practices.

Responsibilities

• Support the development, implementation, and enhancement of enterprise encryption and key management services across cloud and on-premises environments.
• Partner with application, infrastructure, and platform teams to onboard use cases and integrate centralized encryption and key management capabilities into business solutions.
• Contribute to self-service capabilities, automation, and operational processes that improve the scalability and usability of encryption services.
• Help define and maintain service documentation, onboarding procedures, support models, and operational runbooks.
• Implement and support integrations with centralized key management platforms, cloud-native key management services, and related cryptographic technologies.
• Monitor service performance, troubleshoot issues, and coordinate with stakeholders to resolve operational and technical challenges.
• Support compliance with cybersecurity policies, technical standards, and regulatory requirements related to data protection, encryption, and key management.
• Participate in technology evaluations, process improvements, and automation initiatives to enhance service reliability, efficiency, and customer experience.
• Guide development and infrastructure teams on encryption best practices, onboarding requirements, and service consumption patterns.

Skills

Encryption

Key management

Cybersecurity

Platform engineering

Cloud engineering

Automation scripting

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Azure

Docker

Kubernetes

OpenShift

Terraform

Ansible

Jenkins

Bitbucket

Git

PowerShell

Python

Java

C#

Job description

State Street Bank is hiring an Encryption-as-a-Service (EaaS) Platform Engineer to advance encryption and key management across cloud and on‑premises environments, including Edinburgh, London, and other major locations.

In this full‑time role you will partner with application, infrastructure, and platform teams to onboard use cases, build automation, and improve service reliability, documentation, and security posture for data protection.