Lead Cryptography & Security Architect

MasterCard; Arlington (VA); On-site; USD 161,000 - 266,000; Full time

Job summary

Mastercard seeks a Lead, Cryptographic Security Engineer to help advance cryptographic practices across on-premises and cloud environments for payments, data in transit and at rest. You will analyze implementations, advise product teams, and shape governance around key management, TLS, PKI and encryption standards.

We value deep expertise in application security, cryptography, and security engineering, with experience across web, mobile, and web services.

Qualifications

• Experience providing secure design advice for web-based environments and secure communication, including mobile applications, web applications and web services.
• Demonstrate broad awareness of security engineering concepts across all phases of the software development lifecycle.
• Knowledge of cryptography, including encryption, hashing, key management, digital certificates, TLS, PKCS#11, and HSMs.

Responsibilities

• Contribute to the execution of the Cryptographic roadmap for Mastercard – enhancing security posture and enforcing governance and compliance to the Cryptographic and Key Management standards.
• Analyze current cryptographic implementations and identify deviations from our standards.
• Provide technical design and architecture advice to internal teams on how to securely develop and build applications and supporting systems.
• Partner with application teams to determine path to compliance - articulate short, medium and long term plans when necessary.
• Define secure mechanisms for critical business functions, for both on-premises and in cloud environments.

Skills

Application security

Cryptography

Security engineering

Architecture and design

Job description

Mastercard seeks a Lead, Cryptographic Security Engineer to help advance cryptographic practices across on-premises and cloud environments for payments, data in transit and at rest. You will analyze implementations, advise product teams, and shape governance around key management, TLS, PKI and encryption standards.

We value deep expertise in application security, cryptography, and security engineering, with experience across web, mobile, and web services.