Secure DevSecOps Encryption Engineer & Key Management

State Street; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street is seeking an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management controls into the software development lifecycle. You will design secure-by-default encryption capabilities and accelerate adoption through reusable automation, IaC modules, and integrated tooling across CI/CD pipelines.

This role requires 8+ years in relevant fields, expertise in encryption technologies, key management, and automation.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Software Engineering, Information Technology, Cybersecurity, or related discipline.
• 8+ years of experience in software engineering, DevSecOps, platform engineering, cloud engineering, cybersecurity engineering, or related field.
• Experience integrating security controls into SDLC processes, CI/CD pipelines, and modern software delivery platforms.
• Hands-on experience with encryption technologies, cryptographic key management, and secrets management.
• Infrastructure-as-Code experience with Terraform or CloudFormation.

Responsibilities

• Embed encryption and key management controls into SDLC, DevSecOps pipelines, and platform engineering patterns.
• Design and implement secure-by-default encryption capabilities for application teams.
• Develop reusable automation, APIs, templates, and IaC modules to accelerate encryption adoption.
• Integrate enterprise key management and secrets management into CI/CD toolchains.
• Establish automated guardrails and policy-driven controls for encryption across the SDLC.

Skills

Python

Java

Go

C#

JavaScript

TypeScript

PowerShell

Bash

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

CloudFormation

Job description

State Street is seeking an Encryption Engineer (DevSecOps & SDLC) to embed encryption and key management controls into the software development lifecycle. You will design secure-by-default encryption capabilities and accelerate adoption through reusable automation, IaC modules, and integrated tooling across CI/CD pipelines.

This role requires 8+ years in relevant fields, expertise in encryption technologies, key management, and automation.