Senior Lead Cryptography Engineer - PKI & Key Mgmt

Nuveen; United States; Remote; USD 160,000 - 210,000; Full time

Job summary

Nuveen seeks a Senior Lead Cryptography Engineer to automate certificate lifecycles, manage encryption keys, and PKI/CLM/KMS systems across the enterprise. You will evaluate and implement secure patterns, lead projects, and coordinate with security teams to strengthen defenses.

The role requires 5+ years in information security, expertise in PKI/CLM/KMS, and proficiency with Python, PowerShell, and automation ecosystems; CISSP is preferred.

Qualifications

• Bachelor's degree or equivalent experience required.
• 5+ years of professional information security experience.
• 3+ years in PKI/CLM/KMS or related areas preferred.
• CISSP certification or equivalent preferred.

Responsibilities

• Act as primary SME for PKI/CLM/KMS systems and incidents.
• Lead design and implementation of secure PKI/CLM/KMS architectures.
• Support automation workflows and integration patterns for centrally managed tools.
• Communicate with security teams to enhance enterprise posture.
• Coach and mentor junior staff on IT security practices.

Skills

PKI/CLM/KMS

Encryption at rest

Python

PowerShell

CI/CD

IT automation

NIST/NYDFS

Incident response

Education

Bachelor's Degree or equivalent

CISSP certification

Tools

Salt

Ansible

Puppet

Chef

Tines

Bigfix

Job description

Nuveen seeks a Senior Lead Cryptography Engineer to automate certificate lifecycles, manage encryption keys, and PKI/CLM/KMS systems across the enterprise. You will evaluate and implement secure patterns, lead projects, and coordinate with security teams to strengthen defenses.

The role requires 5+ years in information security, expertise in PKI/CLM/KMS, and proficiency with Python, PowerShell, and automation ecosystems; CISSP is preferred.