Senior Digital Assets Systems Engineer

Fidelity Investments; Westlake (TX); On-site; USD 140,000 - 170,000; Full time

Job summary

Fidelity Investments is seeking a highly motivated cybersecurity engineer focused on key management, encryption technologies, and hardware-backed security solutions. You will work with the Digital Asset Security Operations team to secure mission-critical platforms powering digital asset and blockchain services, handling cryptographic infrastructure across on-prem and cloud-native environments.

You will design, implement, and operate secure key lifecycle management systems and encryption controls

Qualifications

• Bachelor’s degree in Computer Science or related field.
• 6+ years in distributed systems or security engineering.
• 2+ years with Hardware Security Modules (HSMs).
• 1–2 years in cloud-native environments.
• Strong cryptographic principles and encryption experience.
• Experience securing Linux/Windows systems with identity and access controls.
• Familiarity with secrets management and certificate lifecycle management.

Responsibilities

• Design, implement, and operate secure key lifecycle management across on‑prem and cloud environments.
• Build and maintain enterprise key management and encryption solutions.
• Support secure containerized apps running in Kubernetes and secure CI/CD pipelines with cryptographic controls.
• Define and enforce security controls across distributed cloud environments.

Skills

Distributed systems

Security engineering

Key management

HSMs

Cloud-native environments

Cryptography fundamentals

Linux hardening

Windows security

Secrets management

Certificate lifecycle management

Agile in large enterprises

Education

Bachelor’s degree in Computer Science

Tools

Kubernetes

Job description

Job Description:

Note: Fidelity will not provide immigration sponsorship for this position

We are seeking a highly motivated cybersecurity engineer with a strong focus on key management, encryption technologies, and hardware-backed security solutions who can make an immediate impact. The ideal candidate is curious, ownership-driven, and thrives in a collaborative, knowledge-sharing environment.

The Digital Asset Security Operations team within Fidelity Enterprise Cybersecurity (ECS) is responsible for securing mission‑critical platforms that power cryptocurrency and blockchain services. This role sits at the intersection of modern cryptographic systems, cloud-native architecture, and secure infrastructure engineering, with deep exposure to encryption platforms, Hardware Security Modules (HSMs), and containerized workloads in AWS.

You will work closely with cybersecurity, risk, and development teams to design, implement, and operate secure key lifecycle management systems and encryption controls across on‑premises infrastructure and distributed cloud‑native environments.

The Expertise and Skills You Bring

• Bachelor’s degree in Computer Science or a related technical discipline

• 6+ years of experience in distributed systems engineering, security engineering, or platform operations

• 2+ years of hands‑on experience with:

• Experience with Hardware Security Modules (HSMs) for secure key generation, storage, and cryptographic operations (strongly preferred)

• 1–2 years of experience working with cloud-native environments, including:

• Strong understanding of cryptographic principles including:

• Experience securing and hardening Linux and Windows systems, with focus on encryption, identity, and access control

• Practical experience with:

• Familiarity with secrets management, certificate lifecycle management, and secure workload identity

• Strong analytical and troubleshooting skills in complex distributed systems

• Experience working in Agile environments within large enterprises

The Value You Deliver

• Contribute to the design and operation of secure cryptographic infrastructure supporting Fidelity’s digital asset and blockchain platforms

• Build, integrate, and maintain enterprise key management and encryption solutions, leveraging:

• Support secure containerized applications running in Kubernetes by implementing:

• Engineer and operate secure CI/CD pipelines to ensure trusted software delivery with integrated cryptographic controls

• Perform security engineering and operational support across distributed cloud environments, including:

• Design and implement end-to-end encryption strategies:

• Evaluate and prototype emerging technologies in:

• Define and enforce security controls and policies across:

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.