Senior Crypto Key Management Systems Engineer

Fidelity Investments; Westlake (TX); On-site; USD 140,000 - 170,000; Full time

Job summary

Fidelity Investments is seeking a highly motivated cybersecurity engineer focused on key management, encryption technologies, and hardware-backed security solutions. You will work with the Digital Asset Security Operations team to secure mission-critical platforms powering digital asset and blockchain services, handling cryptographic infrastructure across on-prem and cloud-native environments.

You will design, implement, and operate secure key lifecycle management systems and encryption controls

Qualifications

• Bachelor’s degree in Computer Science or related field.
• 6+ years in distributed systems or security engineering.
• 2+ years with Hardware Security Modules (HSMs).
• 1–2 years in cloud-native environments.
• Strong cryptographic principles and encryption experience.
• Experience securing Linux/Windows systems with identity and access controls.
• Familiarity with secrets management and certificate lifecycle management.

Responsibilities

• Design, implement, and operate secure key lifecycle management across on‑prem and cloud environments.
• Build and maintain enterprise key management and encryption solutions.
• Support secure containerized apps running in Kubernetes and secure CI/CD pipelines with cryptographic controls.
• Define and enforce security controls across distributed cloud environments.

Skills

Distributed systems

Security engineering

Key management

HSMs

Cloud-native environments

Cryptography fundamentals

Linux hardening

Windows security

Secrets management

Certificate lifecycle management

Agile in large enterprises

Education

Bachelor’s degree in Computer Science

Tools

Kubernetes

Job description

Fidelity Investments is seeking a highly motivated cybersecurity engineer focused on key management, encryption technologies, and hardware-backed security solutions. You will work with the Digital Asset Security Operations team to secure mission-critical platforms powering digital asset and blockchain services, handling cryptographic infrastructure across on-prem and cloud-native environments.

You will design, implement, and operate secure key lifecycle management systems and encryption controls