Senior Cryptographic Architecture & Engineering Lead

American Express; Florida; On-site; USD 180,000 - 240,000; Full time

Job summary

American Express is seeking an experienced cryptographic architect to define enterprise cryptographic architecture and drive modernization across payment and non-payment environments. You will lead post-quantum readiness, crypto-agility, and secure key-management programs while collaborating with engineering, risk, and product teams.

The role emphasizes translating security requirements into scalable, reusable patterns and operating as a bridge between architecture and code with practical,

Qualifications

• Significant experience in cryptographic engineering and security architecture.
• Deep knowledge of symmetric and asymmetric cryptography, encryption, digital signatures, TLS, key establishment and exchange, and modern cryptographic protocols.
• Strong experience with HSMs, enterprise key-management systems, PKI, certificates and cryptographic key lifecycle management.
• Experience designing encryption solutions across applications, APIs, databases, infrastructure and cloud environments.

Responsibilities

• Define enterprise cryptographic architecture and strategic patterns across payment and non-payment environments, applications, APIs, databases, cloud platforms and infrastructure.
• Lead post-quantum cryptography readiness and crypto-agility, including cryptographic inventory and CBOM, identification of quantum-vulnerable implementations, migration patterns and modernization roadmaps.
• Provide architecture leadership for payment cryptography, including payment HSMs, payment key management, cryptographic key hierarchies and applicable PCI requirements.
• Design modern approaches for enterprise encryption, key management, HSM/HSMaaS, PKI and certificates, digital signatures and cloud-native cryptography.
• Evaluate emerging cryptographic technologies and use cases, including blockchain and distributed ledgers, advanced digital-signature approaches and other modern cryptographic techniques.
• Translate Data Security standards into architecture-as-code, reusable engineering patterns, reference implementations, APIs and automated guardrails.
• Partner directly with engineering teams to prototype, validate and implement cryptographic solutions rather than relying solely on architecture documentation.
• Integrate cryptographic requirements and security telemetry into the SDLC and Permit to Operate, enabling earlier identification and enforcement of security requirements.
• Drive adoption of strategic enterprise cryptographic services and identify opportunities to simplify or retire fragmented and legacy implementations.
• Assess cryptographic risk based on algorithm strength, key protection, data sensitivity, threat exposure, implementation architecture and evolving industry standards.
• Provide senior technical leadership for significant cryptographic vulnerabilities, incidents, architecture decisions and technology transformations.
• Mentor architects and engineers and raise cryptographic engineering capability across the organization.

Skills

Cryptographic engineering

Cybersecurity architecture

Applied cryptography

Security engineering

Tools

HSMs

PKI

Key management systems

Cloud KMS

Job description

American Express is seeking an experienced cryptographic architect to define enterprise cryptographic architecture and drive modernization across payment and non-payment environments. You will lead post-quantum readiness, crypto-agility, and secure key-management programs while collaborating with engineering, risk, and product teams.

The role emphasizes translating security requirements into scalable, reusable patterns and operating as a bridge between architecture and code with practical,