Senior PKI & Crypto Security Architect

474 MS Services Group, Inc.; New York (NY); On-site; USD 155,000 - 215,000; Full time

Job summary

Morgan Stanley is seeking a Lead Cryptography Engineer - PKI to design, implement, and support enterprise cryptographic solutions, including PKI and HSMs. You will manage certificate lifecycles, key management, and crypto agility, serving in a 24/7 on-call environment within the PKI and Secrets Management team.

With 10+ years in cybersecurity engineering or operations, you will lead architectural initiatives, mentor junior colleagues, and collaborate across security, infra, and application

Qualifications

• Bachelor's degree in CS/Cybersecurity/IT or related field.
• 10+ years of hands-on cybersecurity engineering or operations experience.
• Strong understanding of cryptographic principles, TLS, X.509, and key exchange.
• Experience managing PKI environments and certificate lifecycle tools.
• Hands-on experience with HSM technologies and key management.
• Familiarity with automation/scripting (Python/PowerShell).
• Knowledge of PQC trends and crypto-agility; relevant certifications preferred.

Responsibilities

• Design, implement, and maintain enterprise cryptographic infrastructure including PKI and HSMs.
• Manage full certificate lifecycle: issuance, renewal, revocation, deployment.
• Engineer and support secure key management with HSMs: generation, storage, rotation.
• Monitor cryptographic services 24/7; handle on-call rotations, incident response.
• Automate certificate/key management to reduce manual effort and risk.
• Collaborate with application/infrastructure/security teams to integrate cryptography.
• Evaluate and adopt PQC capabilities and crypto-agility strategies.

Skills

PKI

HSMs

TLS

X.509

Cryptography

Python

PowerShell

Security engineering

Cloud platforms

Crypto agility

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

HSM technologies

PKI environments

Job description

Morgan Stanley is seeking a Lead Cryptography Engineer - PKI to design, implement, and support enterprise cryptographic solutions, including PKI and HSMs. You will manage certificate lifecycles, key management, and crypto agility, serving in a 24/7 on-call environment within the PKI and Secrets Management team.

With 10+ years in cybersecurity engineering or operations, you will lead architectural initiatives, mentor junior colleagues, and collaborate across security, infra, and application