Senior Cryptography & PKI Systems Lead

TIAA; Texas; On-site; USD 160,000 - 210,000; Full time

Job summary

At TIAA, we seek a seasoned information security professional to act as SME for PKI/CLM/KMS systems and lead secure, robust EKM design. You will escalate complex incidents, provide engineering support for critical PKI/CLM/KMS services, and drive pattern innovations across CLM/KMS platforms.

The role requires deep knowledge of PKI/CLM/KMS, hands-on experience with encryption and security tooling, and collaboration with leadership to shape the EKM roadmap.

Qualifications

• Bachelor's degree or equivalent experience required.
• 5+ years of professional information security experience.
• 3+ years of experience in PKI, CLM or KMS.
• CISSP certification preferred.
• Experience leading project workstreams and coordinating deliverables with junior team members.

Responsibilities

• Act as primary SME for one or more PKI/CLM/KMS systems.
• Act as senior escalation point for complex EKM related incidents and problems.
• Provide engineering support for critical EKM systems and services including PKI/CLM/KMS app servers, automation workflows, HSMs.
• Identify opportunities for new CLM/KMS patterns and develop solutions to support the design.
• Lead the design and implementation of secure PKI/CLM/KMS.

Skills

Accountability

Adaptability

Cloud Computing Security

Collaboration

Communication

Compliance

Cybersecurity

Detail-Oriented

General Risk Management

Network Security

Prioritizes Effectively

Education

Bachelor's Degree or Equivalent Experience Required

Tools

PowerShell

Bash

Python

Salt

Ansible

Puppet

Chef

Tines

Bigfix

Job description

At TIAA, we seek a seasoned information security professional to act as SME for PKI/CLM/KMS systems and lead secure, robust EKM design. You will escalate complex incidents, provide engineering support for critical PKI/CLM/KMS services, and drive pattern innovations across CLM/KMS platforms.

The role requires deep knowledge of PKI/CLM/KMS, hands-on experience with encryption and security tooling, and collaboration with leadership to shape the EKM roadmap.