Security Engineer - Vice President - IAM - Jersey City

Goldman Sachs Bank AG; Jersey City (NJ); On-site; USD 130,000 - 250,000; Full time

Job summary

Goldman Sachs is seeking a Senior Vice President to lead global PKI strategy, cryptography, and certificate lifecycle management within the IAM organization in Jersey City. You will architect scalable PKI solutions, manage CAs/CSs, and drive modernization across hybrid-cloud environments.

The role emphasizes governance, audit readiness, incident response, and collaboration with security vendors, with a focus on PQC trends and industry standards.

Qualifications

• 10+ years of experience in cybersecurity and IT, with at least 8+ years in PKI/cryptography leadership.
• Deep understanding of TLS/SSL, asymmetric/symmetric cryptography, SSH key management, code signing.
• Experience with PKI governance, CP/CPS, and audit readiness.

Responsibilities

• Define and execute global PKI strategy and enterprise certificate management roadmap.
• Oversee design and operation of CAs, RAs, HSMs, and KMS.
• Drive automated certificate lifecycle management to reduce outages and manual work.
• Ensure compliance with cryptographic standards and regulatory requirements.
• Architect PKI solutions for Kubernetes, service meshes, and hybrid-cloud deployments.
• Lead incident response for cryptographic vulnerabilities and outages.
• Manage external CA/vendor relationships and stay ahead of cryptographic trends.

Skills

Strategic Leadership

Infrastructure & Engineering

Automation & Lifecycle Management

Compliance & Governance

Cloud & Modern Tech Integration

Incident Response & Risk Management

Vendor & Industry Representation

Education

Bachelor’s or Master’s degree in Computer Science or related field

Tools

HSM management

Job description

Security Engineer - Vice President - IAM - Jersey City location_on Jersey City, NJ, United States

Who We Are

Identity Security is part of the Identity and Access Management (IAM) business unit within Foundation Engineering Division of Goldman Sachs.

The Role

The Senior Vice President (SVP) of Certificate and PKI Technologies will serve as the leader responsible for global strategy, engineering, deployment, and operations of the enterprise Public Key Infrastructure (PKI), cryptography, and digital certificate lifecycle management.

Core Skills and Experience we are looking for

• Strategic Leadership:Define and execute the global enterprise roadmap for PKI, certificate management, and cryptographic services, ensuring alignment with overall cybersecurity and business objectives.
• Infrastructure & Engineering:Oversee the design, implementation, and maintenance of internal and external Certificate Authorities (CAs), Registration Authorities (RAs), Hardware Security Modules (HSMs), and Key Management Systems (KMS).
• Automation & Lifecycle Management:Drive the adoption of automated certificate lifecycle management (CLM) tools and protocols (e.g., ACME, EST, SCEP) to eliminate manual processes and prevent outages caused by expired certificates.
• Compliance & Governance:Ensure strict adherence to cryptographic standards, industry regulations, and audit requirements (e.g., WebTrust, SOC2, ISO 27001). Establish and maintain the enterprise Certificate Policy and Certification Practice Statement (CP/CPS).
• Cloud & Modern Tech Integration:Architect scalable PKI solutions tailored for modern environments, including Kubernetes, service meshes and hybrid-cloud deployments (AWS, Azure, GCP).
• Incident Response & Risk Management:Serve as the escalation point for cryptographic vulnerabilities, certificate-related outages, and emergency key rotations.
• Vendor & Industry Representation:Manage relationships with external Certificate Authorities and security vendors. Represent the organization in industry consortiums to stay ahead of emerging cryptographic trends, such as Post-Quantum Cryptography (PQC)

Attitudes we want

• Ability to thrive in our global organization in a fast paced, resultoriented, hybrid workplace.
• Team player, eager to work in a global organization.
• Enjoys working in an Agile environment.
• Strong emphasis on personal initiative and ownership.
• Customer focused and values good developer experience.
• A passion for learning new technologies.

Preferred Qualifications

• Experience:10+ years of experience in cybersecurity and information technology, with at least 8+ years of dedicated leadership experience in PKI, cryptography, and data protection.
• Technical Expertise:Deep understanding of asymmetric/symmetric cryptography, TLS/SSL protocols, SSH key management, code signing, and HSM management.
• Education:Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or a related field.
• Certifications:Preferred certifications include CISSP, CISM, or specialized cryptographic credentials.

Salary Range

The expected base salary for this Jersey City, NJ, United States-based position is $130000-$250000. In addition, you may be eligible for a discretionary bonus if you are an active employee as of fiscal year-end.

Benefits

Goldman Sachs is committed to providing our people with valuable and competitive benefits and wellness offerings, as it is a core part of providing a strong overall employee experience. A summary of these offerings, which are generally available to active, non-temporary, full-time and part‑time US employees who work at least 20 hours per week, can be found here .

Healthcare & Medical Insurance

We offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short-term disability, long-term disability, life, accidental death, labor accident and business travel accident insurance.

Financial Wellness & Retirement

We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees’ priorities.

Health Services

We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices.

Fitness

To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).

Child Care & Family Care

We offer on-site child care centers that provide full-time and emergency back‑up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.

Benefits at Goldman Sachs

Read more about the full suite of class‑leading benefits our firm has to offer.