Secure-by-Design Encryption Engineer (DevSecOps)

State Street; Clifton (NJ); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into the Software Development Life Cycle and CI/CD pipelines. You will design secure-by-default capabilities and create reusable automation, APIs, and IaC modules to accelerate organization-wide adoption.

The role combines software engineering, cloud, and cybersecurity expertise, requiring collaboration with developers, architects, and platform teams to ensure scalable, compliant encryption across

Qualifications

• Bachelor's degree or equivalent practical experience in a technical field.
• 8+ years of software engineering, DevSecOps, platform/cloud engineering, or related field.
• Experience integrating security controls into SDLC/CI-CD pipelines.
• Hands-on with encryption, key management, and data protection controls.
• Security automation within development pipelines using tools like Harness/Jenkins.
• Experience with IaC (Terraform/CloudFormation).
• Proficiency in Python, Java, Go, or similar languages.
• Experience with cloud platforms (Azure/AWS/GCP) and container tech (Kubernetes/OpenShift).
• Knowledge of security standards (NIST, ISO 27001) and certifications is a plus.

Responsibilities

• Embed encryption and key management into SDLC, DevSecOps pipelines, and platform patterns.
• Design secure-by-default encryption capabilities for developer adoption.
• Develop reusable automation, APIs, templates, and IaC modules for encryption adoption.
• Integrate key management, secrets, certificates into CI/CD workflows.
• Establish automated guardrails and policy-driven controls for encryption.
• Collaborate with architecture, cloud, and platform teams to standardize cryptography.
• Create developer enablement materials and technical standards for encryption.
• Improve Encryption-by-Design program through automation and self-service adoption.
• Monitor implementations for gaps and regulatory evidence; drive remediation.

Skills

Python

Java

Go

DevSecOps

Automation

Security architecture

Kubernetes

Education

Bachelor's degree

8+ years experience

Security automation

Infrastructure as Code

Terraform

CloudFormation

Tools

Harness

Jenkins

Terraform

CloudFormation

Kubernetes

OpenShift

HSMs

Job description

State Street seeks an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management into the Software Development Life Cycle and CI/CD pipelines. You will design secure-by-default capabilities and create reusable automation, APIs, and IaC modules to accelerate organization-wide adoption.

The role combines software engineering, cloud, and cybersecurity expertise, requiring collaboration with developers, architects, and platform teams to ensure scalable, compliant encryption across