Security Engineer - Cryptographic Engineer for Post Quantum Cryptography

PNC Financial Services Group, Inc.; Denver (CO); On-site; USD 91,000 - 185,900; Full time

Benefits offered by this job

Comprehensive medical coverage

401(k) with PNC match

Educational assistance

Job summary

PNC Financial Services Group, Inc. is seeking a Security Engineer to enhance security technologies and manage cryptographic solutions. This role demands a deep understanding of cryptographic principles and standards within a supportive workplace culture, fostering innovation and collaboration.

A successful candidate will bring over 5 years of relevant experience, be adept in applying security concepts, and will contribute to delivering exceptional customer experiences across various locations including Denver, CO.

Qualifications

• 5+ years of industry-relevant experience required.
• Certifications in cryptographic technologies preferred.
• Ability to translate complex concepts for non-technical stakeholders.

Responsibilities

• Provide subject matter expertise to design technology solutions.
• Responsible for project timelines and architectural designs.
• Evaluate patches and updates for impact to existing solutions.

Skills

Cryptographic lifecycle management

Key management solutions

Public Key Infrastructure (PKI)

Application layer protection technologies

Analytical Thinking

Effective Communication

Education

University/college degree or equivalent

Tools

Jira

Confluence

OpenSearch

Job description

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Engineer within PNC's Technology organization, you will be based in Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX; Denver, CO or Phoenix, AZ.

Cryptographic, Technical, and Tooling Experience

• Experience with enterprise centralized cryptographic program – Cryptographic lifecycle management, secure environments, key ceremonies, and chain of custody controls
• Key management solutions across cloud (AWS, Azure) and data platforms (MSSQL, Oracle, Linux, MongoDB, Pure, Neo4j)
• Public Key Infrastructure (PKI), including certificate lifecycle management, issuance, renewal, and troubleshooting
• Application layer protection technologies and tokenization strategies
• Cryptographic inventory awareness and integration across platforms supporting enterprise visibility
• Familiarity with cryptographic agility principles, post-quantum tooling, and quantum-safe technologies
• Advanced understanding of cryptographic solutions supporting strategic planning, including the impact of quantum computing on enterprise security
• Hands on experience with cryptographic platforms and tooling – Key Management: Oracle Key Manager, Thales CipherTrust Manager; HSMs: Thales, SWIFT, Entrust; PKI/Certificate Management: Venafi, Microsoft ADCS; Tokenization: Protegrity; Cryptographic Inventory: AgileSec Analytics
• Proficiency with enterprise standard tools – Workflow and collaboration platforms (Jira, Confluence, SharePoint, ServiceNow); Data visualization and reporting tools with ability to support reporting, dashboarding and analytics; OpenSearch preferred

Compliance, Regulatory, and Industry Knowledge

• Knowledge of PCI standards, FIPS requirements (including validation), FIPS, and NIST cryptographic guidance for current, and emerging standards
• Foundational understanding of Cryptographic agility principles and their application in enterprise environments
• Familiarity of Industry guidance and collaboration bodies (G7, FS-ISAC, FSSCC, CNSA) related to PQC roadmap development and migration planning

Soft Skills and Professional Qualities

• The ability to deliver both initiatives and business as usual (BAU) activities to completion
• Strong analytical and problem‑solving skills to identify and resolve complex issues
• Demonstrates a high level of precision in implementing and validating cryptographic controls and processes
• Capable of translating complex technical concepts for non‑technical stakeholders and collaborating across teams
• Adapt to stay updated with evolving security threats, technologies, and cryptographic standards
• Produce clear, concise, and professional documentation (policies, procedures, technical designs, and executive‑level materials)
• Forward thinking mindset with ability to see beyond the present and consider the long‑term implications of solutions
• Ability to define and track metrics and key risk indicators (KRIs) to measure control effectiveness and program maturity

Additional Preferred Experience

• Certifications in cryptographic technologies or EC Council’s Certified Encryption Specialist
• Participation in cryptographic working groups or standards bodies (FS-SIAC, X9, PKI Consortium, ect.)

Responsibilities

• Provide subject matter expertise when applying security concepts and leverage technical knowledge and industry experience to design, build, and maintain technology solutions
• Responsible for deliverables related to project timelines and working with architecture to translate high‑level architectural designs into implementation details (e.g., sizing, integration, onboarding, and operationalization)
• Evaluate patches, updates, and ongoing maintenance; determine impacts to existing solutions when new standards are implemented
• Utilize change control and governance processes to ensure alignment of solutions
• Develop detailed implementation, configuration, design, and engineering documentation; build and implement solutions
• Work with operational partners to enable transition and day‑to‑day supportability; provide engineering support to existing technology in a production environment and collaborate with other groups as required
• Seek opportunities to grow a broad knowledge base to complement specific subject matter expertise

Qualifications

• University/college degree or equivalent combination of education, job‑specific certification(s), and experience (including military service) – 5+ years of industry‑relevant experience
• Specific certifications often required; no specific certification required but preferred: Access Control (AC), Building Architecture, Cryptography, Customer Solutions, Disaster Recovery Planning, Hardware Security Modules (HSM), Information Security, Network Security, Physical Security, Public Key Infrastructure, Quantum Cryptography, Risk Assessments, Security Technologies
• Competencies: Analytical Thinking, Effective Communications, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Network and Internet Security, Problem Solving, Technical Troubleshooting
• Pay Transparency – Base Salary: $91,000.00 – $185,900.00 (varies by location and experience)

Benefits

• Comprehensive medical/prescription drug coverage (with Health Savings Account feature)
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long‑term disability protection
• 401(k) with PNC match, pension and stock purchase plans
• Dependent care reimbursement account; backup child/elder care; adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Paid time off: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year; 15‑25 vacation days each year depending on career level and years of service

Disability Accommodations Statement

If an accommodation is required to participate in the application process, please contact us via email at [e-mail]. Please include “accommodation request” in the subject line title and be sure to include your name, the job ID, and your preferred method of contact in the body of the email. Emails not related to accommodation requests will not receive responses. Applicants may also call 877-968-7762 and say "Workday" for accommodation assistance. All information provided will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. At PNC we foster an inclusive and accessible workplace. We provide reasonable accommodations to employment applicants and qualified individuals with a disability who need an accommodation to perform the essential functions of their positions.

Equal Employment Opportunity (EEO)

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law. This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history. California Residents: Refer to the California Consumer Privacy Act Privacy Notice to gain understanding of how PNC may use or disclose your personal information in our hiring practices.

Additional Information

PNC is an in‑office company that fosters a supportive culture where employees can thrive and achieve balance. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.