Security Engineer - Vice President - IAM

Cybersecurity Jobs; Jersey City (NJ); Hybrid; USD 130,000 - 250,000; Full time

Benefits offered by this job

Healthcare & Medical Insurance

Holiday & Vacation Policies

Financial Wellness & Retirement

Health Services

Fitness

Child Care & Family Care

Job summary

Goldman Sachs in Jersey City, NJ seeks a Vice President to lead the global PKI strategy and cryptography program. This role drives enterprise certificate lifecycle and key management across multi-cloud and on-prem environments, guiding a security engineering team.

You will ensure robust, compliant, and highly available trust services aligned with NIST, CA/Browser Forum, and ISO standards while scaling CA/RAs, HSMs, and KMS in a hybrid setup.

Qualifications

• 8+ years of experience in cybersecurity and information technology, with leadership in PKI, cryptography, and data protection.
• Strong understanding of asymmetric/symmetric cryptography, TLS/SSL, SSH, code signing, and HSM management.
• Preferrred certifications include CISSP, CISM, or specialized cryptographic credentials.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or a related field.

Responsibilities

• Lead global strategy, engineering deployment, and operations for PKI, cryptography, and certificate lifecycle management.
• Ensure trust services are robust, compliant, and highly available per industry standards.
• Define and execute the global enterprise roadmap for PKI, certificate management, and cryptographic services.
• Oversee the design, implementation, and maintenance of CAs, RAs, HSMs, and KMSs.
• Drive adoption of CLM tools and protocols like ACME, EST, and SCEP to reduce outages.
• Maintain adherence to WebTrust, SOC 2, ISO 27001; establish CP/CPS.
• Architect scalable PKI solutions for Kubernetes, hybrid cloud on AWS/Azure/GCP.
• Escalation point for cryptographic vulnerabilities and key rotations.
• Manage relationships with external CAs and security vendors.

Skills

Global mindset

Agile experience

Ownership

Customer focus

Learning mindset

Education

Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or related field

Job description

As a Vice President within Goldman Sachs’ Identity Security (IAM) organization, this role leads the global strategy and engineering execution for enterprise trust services. You will own the roadmap and operational delivery for PKI, cryptography, and digital certificate lifecycle management across multi-cloud, on-premises, and IoT environments, while managing a team of security engineers.

Working in Jersey City, NJ in a hybrid setup, you will help ensure robust, compliant, and highly available certificate and key management services aligned to recognized industry standards.

What you’ll do

• Lead global strategy, engineering, deployment, and operations for enterprise Public Key Infrastructure (PKI), cryptography, and digital certificate lifecycle management.
• Ensure trust services remain robust, compliant, and highly available, guided by standards from organizations such as the NIST Computer Security Resource Center and the CA/Browser Forum.
• Define and execute the global enterprise roadmap for PKI, certificate management, and cryptographic services in alignment with cybersecurity and business objectives.
• Oversee the design, implementation, and maintenance of internal and external Certificate Authorities (CAs), Registration Authorities (RAs), Hardware Security Modules (HSMs), and Key Management Systems (KMS).
• Drive adoption of automated certificate lifecycle management (CLM) tools and protocols such as ACME, EST, and SCEP to reduce manual effort and prevent outages from expired certificates.
• Maintain strict adherence to cryptographic standards, industry regulations, and audit requirements including WebTrust, SOC 2, and ISO 27001, and establish or maintain the enterprise Certificate Policy and Certification Practice Statement (CP/CPS).
• Architect scalable PKI solutions for modern environments, including Kubernetes, service meshes, and hybrid cloud deployments on AWS, Azure, and GCP.
• Serve as the escalation point for cryptographic vulnerabilities, certificate-related outages, and emergency key rotations.
• Manage relationships with external Certificate Authorities and security vendors.
• Represent the organization in industry consortiums to track emerging cryptographic trends, including Post-Quantum Cryptography (PQC).

Required qualifications

• Ability to thrive in a global, fast-paced, result-oriented, hybrid workplace.
• Strong team orientation and willingness to work within a global organization.
• Enjoyment of working in an Agile environment.
• Emphasis on personal initiative and ownership.
• Customer focused, with value placed on good developer experience.
• Passion for learning new technologies.
• 8+ years of experience (minimum).
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or a related field.

Core technologies

• ACME, EST, SCEP
• NIST Computer Security Resource Center, CA/Browser Forum
• Kubernetes, service meshes
• AWS, Azure, GCP
• Post-Quantum Cryptography (PQC)
• WebTrust, SOC 2, ISO 27001
• CP/CPS, TLS/SSL, SSH

Compensation & benefits

Salary: USD 130,000 - 250,000 per year.

• Healthcare & Medical Insurance
• Holiday & Vacation Policies
• Financial Wellness & Retirement
• Health Services
• Fitness
• Child Care & Family Care

Preferred qualifications

• 10+ years of experience in cybersecurity and information technology, including 8+ years of dedicated leadership experience in PKI, cryptography, and data protection.
• Deep understanding of asymmetric/symmetric cryptography, TLS/SSL protocols, SSH key management, code signing, and HSM management.
• Preferred certifications include CISSP, CISM, or specialized cryptographic credentials.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or a related field.