Security Engineer - Vice President - IAM - Jersey City

Socket.dev; New Jersey; On-site; USD 130,000 - 250,000; Full time

Job summary

Goldman Sachs is seeking a Senior Vice President of Certificate and PKI Technologies to lead global PKI strategy, engineering, deployment, and operations across multi-cloud and on-prem environments. This executive will head a security engineering team ensuring robust, compliant trust services aligned with NIST, CA/Browser Forum, and industry standards.

The role requires 10+ years in cybersecurity with 8+ years in PKI leadership, expertise in cryptography, TLS/SSL, HSM management, and governance.

Qualifications

• 10+ years of cybersecurity and IT experience with 8+ years in PKI/cryptography leadership.
• Deep understanding of asymmetric/symmetric cryptography, TLS/SSL, SSH key management, code signing, and HSMs.
• Bachelor's or Master's in Computer Science, Cybersecurity, Cryptography, or related field.

Responsibilities

• Define and execute the global enterprise PKI strategy and cryptographic services roadmap.
• Lead deployment, operations, and governance of CAs, RAs, HSMs, and KMS across multi-cloud and on-prem environments.
• Drive automated certificate lifecycle management to prevent outages from expired certs.
• Ensure compliance with WebTrust, SOC2, ISO 27001 and maintain CP/CPS documentation.

Skills

Strategic Leadership

Infrastructure & Engineering

Automation & Lifecycle Management

Compliance & Governance

Cloud & Modern Tech Integration

Incident Response & Risk Management

Vendor & Industry Representation

Agile Practice

Team Leadership

Education

Bachelor's or Master's in CS/Cybersecurity

Tools

PKI tools

HSM management

KMS

ACME/EST/SCEP

TLS/SSL concepts

Job description

Who We Are

Identity Security is part of the Identity and Access Management (IAM) business unit within Foundation Engineering Division of Goldman Sachs.

The Role

The Senior Vice President (SVP) of Certificate and PKI Technologies will serve as the leader responsible for global strategy, engineering, deployment, and operations of the enterprise Public Key Infrastructure (PKI), cryptography, and digital certificate lifecycle management.

This role is critical to securing the enterprise's digital identity footprint across multi-cloud, on-premises, and IoT environments. The VP will lead a high-performing team of security engineers to ensure robust, compliant, and highly available trust services that align with industry standards set by organizations like the NIST Computer Security Resource Centerand the CA/Browser Forum.

Core Skills and Experience we are looking for

• Strategic Leadership:Define and execute the global enterprise roadmap for PKI, certificate management, and cryptographic services, ensuring alignment with overall cybersecurity and business objectives.
• Infrastructure & Engineering:Oversee the design, implementation, and maintenance of internal and external Certificate Authorities (CAs), Registration Authorities (RAs), Hardware Security Modules (HSMs), and Key Management Systems (KMS).
• Automation & Lifecycle Management:Drive the adoption of automated certificate lifecycle management (CLM) tools and protocols (e.g., ACME, EST, SCEP) to eliminate manual processes and prevent outages caused by expired certificates.
• Compliance & Governance:Ensure strict adherence to cryptographic standards, industry regulations, and audit requirements (e.g., WebTrust, SOC2, ISO 27001). Establish and maintain the enterprise Certificate Policy and Certification Practice Statement (CP/CPS).
• Cloud & Modern Tech Integration:Architect scalable PKI solutions tailored for modern environments, including Kubernetes, service meshes and hybrid-cloud deployments (AWS, Azure, GCP).
• Incident Response & Risk Management:Serve as the escalation point for cryptographic vulnerabilities, certificate-related outages, and emergency key rotations.
• Vendor & Industry Representation:Manage relationships with external Certificate Authorities and security vendors. Represent the organization in industry consortiums to stay ahead of emerging cryptographic trends, such as Post-Quantum Cryptography (PQC)

Attitudes we want

• Ability to thrive in our global organization in a fast paced, resultoriented, hybrid workplace.
• Team player, eager to work in a global organization.
• Enjoys working in an Agile environment.
• Strong emphasis on personal initiative and ownership.
• Customer focused and values good developer experience.
• A passion for learning new technologies.

Preferred Qualifications

• Experience:10+ years of experience in cybersecurity and information technology, with at least 8+ years of dedicated leadership experience in PKI, cryptography, and data protection.
• Technical Expertise:Deep understanding of asymmetric/symmetric cryptography, TLS/SSL protocols, SSH key management, code signing, and HSM management.
• Education:Bachelor's or Master's degree in Computer Science, Cybersecurity, Cryptography, or a related field.
• Certifications:Preferred certifications include CISSP, CISM, or specialized cryptographic credentials.

Salary Range
The expected base salary for this Jersey City, NJ, United States-based position is $130000-$250000. In addition, you may be eligible for a discretionary bonus if you are an active employee as of fiscal year-end.

Benefits
Goldman Sachs is committed to providing our people with valuable and competitive benefits and wellness offerings, as it is a core part of providing a strong overall employee experience. A summary of these offerings, which are generally available to active, non-temporary, full-time and part-time US employees who work at least 20 hours per week, can be found here.