Senior Cryptography Engineer - PKI & HSM Lead

Morgan Stanley; New York (NY); On-site; USD 155,000 - 215,000; Full time

Job summary

Morgan Stanley's Technology division seeks a Lead Cryptography Engineer - PKI (VP level) to design, implement, and operate enterprise cryptographic solutions, including PKI, HSMs, and certificate lifecycle management.

The role emphasizes 24/7 service, on-call rotations, automation, and collaboration with application, infrastructure, and security teams, with exposure to PQC and crypto agility.

Qualifications

• Bachelor's degree or higher in a related field.
• 10+ years of hands-on cybersecurity engineering or operations experience, with PKI/HSM exposure.
• Strong cryptographic principles and standards knowledge (TLS, X.509).
• Proven PKI environments and certificate lifecycle management experience.

Responsibilities

• Design, implement, and maintain enterprise cryptographic infrastructure (PKI, HSMs).
• Manage full certificate lifecycle: issuance, renewal, revocation, deployment.
• Engineer and support secure key management, including rotation and backup.
• Operate cryptographic services in a 24/7 environment with on-call rotations.
• Automate certificate and key management to reduce manual work and risk.
• Collaborate with application, infra, and security teams to integrate cryptographic controls.
• Support PQC capabilities, crypto-agility strategies, and transition planning.

Skills

Cryptography engineering

PKI

HSM

Certificate lifecycle management

Automation scripting

Cloud environments

Leadership

Mentoring

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

Python

PowerShell

Job description

Morgan Stanley's Technology division seeks a Lead Cryptography Engineer - PKI (VP level) to design, implement, and operate enterprise cryptographic solutions, including PKI, HSMs, and certificate lifecycle management.

The role emphasizes 24/7 service, on-call rotations, automation, and collaboration with application, infrastructure, and security teams, with exposure to PQC and crypto agility.