PQC & Cryptographic Agility Engineer

STATE STREET CORPORATION; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Comprehensive benefits program

Paid time off

Employee Assistance Program

Job summary

State Street Corporation seeks a Cryptographic Agility & PQC Engineer to advance the firm’s cryptographic modernization. You’ll inventory assets, assess risks, and define migration paths across applications and platforms, partnering with PKI, architecture, and infrastructure teams to ensure secure, compliant transitions.

The role focuses on PQC readiness, monitoring cryptographic trends, and delivering metrics to execs, with a strong emphasis on financial services regulatory alignment and

Qualifications

• Understanding of modern cryptographic concepts, encryption technologies, PKI, certificate management, and key management systems.
• Experience assessing security risks and translating technical findings into actionable remediation plans.
• Ability to collaborate effectively across diverse technology and business teams to drive enterprise-wide initiatives.
• Strong analytical and problem-solving skills with a structured approach to complex technical challenges.
• Curiosity and a desire to stay current with advancements in cybersecurity, cryptography, and quantum computing.
• Excellent written and verbal communication skills, including the ability to present technical concepts to both technical and non-technical audiences.
• A proactive mindset focused on continuous improvement, operational excellence, and risk reduction.
• Experience working within highly regulated financial services or other complex enterprise environments is a plus.

Responsibilities

• Mature the enterprise Cryptographic Agility program, enabling the organization to respond effectively to evolving cryptographic risks and industry standards.
• Develop and maintain an inventory of cryptographic assets, dependencies, algorithms, protocols, certificates, keys, and related technologies across applications, platforms, and infrastructure.
• Identify systems utilizing vulnerable, deprecated, or legacy cryptographic algorithms and define remediation and migration strategies.
• Evaluate emerging post-quantum cryptography (PQC) standards and technologies, with a focus on NIST-approved cryptographic algorithms and industry best practices.
• Define approved cryptographic migration paths, transition frameworks, and implementation guidance for application and platform teams.
• Partner with enterprise architecture, platform engineering, application development, PKI, and infrastructure teams to assess cryptographic readiness and capabilities.
• Pilot and validate PQC-enabled technologies, services, and solutions to support future enterprise adoption.
• Develop standards, procedures, and technical guidance supporting cryptographic agility and quantum readiness initiatives.
• Monitor changes in the cryptographic landscape, including advancements in quantum computing, regulatory expectations, and industry standards.
• Produce metrics, dashboards, and executive reporting to track cryptographic risk, migration progress, and PQC readiness across the enterprise.
• Contribute to strategic security initiatives focused on strengthening the organization's long-term cryptographic resilience.

Skills

Cryptography knowledge

Security risk assessment

Cross-functional collaboration

Analytical problem solving

Effective communication

Curiosity about cybersecurity

Continuous improvement mindset

Experience in regulated financials

Education

Bachelor's degree in Computer Science, Cybersecurity, IT, Engineering, Mathematics, or related field

5+ years in cybersecurity, security engineering, encryption, PKI, key management, or related field

Tools

AWS

Azure

OCI

Google Cloud Platform

Terraform

Ansible

Jenkins

Harness

Job description

State Street Corporation seeks a Cryptographic Agility & PQC Engineer to advance the firm’s cryptographic modernization. You’ll inventory assets, assess risks, and define migration paths across applications and platforms, partnering with PKI, architecture, and infrastructure teams to ensure secure, compliant transitions.

The role focuses on PQC readiness, monitoring cryptographic trends, and delivering metrics to execs, with a strong emphasis on financial services regulatory alignment and