Lead Cryptography Architect – PKI, HSM & PQC

Morgan-Stanley; Town of Islip (NY); On-site; USD 155,000 - 215,000; Full time

Job summary

Morgan Stanley's Technology division seeks a Lead Cryptography Engineer specializing in PKI and secrets management to design, implement, and operate enterprise cryptographic solutions that protect our systems and data across the firm.

You will manage PKI environments, certificates, and HSMs, automate key management, participate in on-call rotations, and collaborate with security teams to drive crypto agility and PQC readiness.

Qualifications

• 10+ years of hands-on cybersecurity engineering or operations.
• Strong understanding of TLS, X.509, and encryption algorithms.
• Experience with PKI environments and certificate lifecycle tools in enterprise and/or cloud.
• Hands-on experience with HSM technologies and secure key management.

Responsibilities

• Design, implement, and maintain enterprise cryptographic infrastructure (PKI, HSM, certificate management).
• Manage the full certificate lifecycle (issuance, renewal, revocation, deployment).
• Automate certificate and key management processes.
• Monitor cryptographic services in a 24/7 environment with on-call rotations.
• Collaborate with security, application, and cloud teams to enable crypto agility and PQC initiatives.

Skills

PKI

HSMs

Certificate lifecycle

Key management

Automation

Cloud security

Leadership

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology

Tools

HSM technologies

PKI tooling

Job description

Morgan Stanley's Technology division seeks a Lead Cryptography Engineer specializing in PKI and secrets management to design, implement, and operate enterprise cryptographic solutions that protect our systems and data across the firm.

You will manage PKI environments, certificates, and HSMs, automate key management, participate in on-call rotations, and collaborate with security teams to drive crypto agility and PQC readiness.