Senior PKI/ Cryptography Engineer

Freddie Mac; McLean (VA); On-site; USD 126,000 - 190,000; Full time

Job summary

Freddie Mac is seeking an experienced Senior PKI/Cryptography Engineer to join the Data Protection team within IT Security Engineering. The role emphasizes PKI administration, cryptographic tooling, and collaboration with internal and external partners to strengthen data protection controls.

This position includes an on-call requirement, aligns with SOX controls, and offers a market-based salary with annual incentive opportunities.

Qualifications

• 5-7+ years in IT security, including execution, testing, and maintenance of SOX controls.
• 5+ years of hands-on experience in PKI and cryptography, with a strong understanding of data encryption, SaaS security solutions, and cloud client security.
• Knowledge of security and cryptographic primitives like hashes, symmetric/asymmetric key algorithms, and signature algorithms.
• Experience with Linux and Windows, including server building and OS-based operations.
• Strong skills in partnering across IT and business lines to deliver and enhance Data Protection services.
• Familiarity with security regulations and frameworks (MITRE, CIS CSC, SOX), as well as NIST, IANA, RFCs, and IETF.
• Experience with HIPS clients, firewall rules, secure configurations, Linux, Network, and Windows commands.
• Proficiency in Python, BASH, PowerShell, and Ansible.
• Understanding of Java, JSON, XML, YAML, and Object-Oriented Programming and Design Patterns.
• Strong understanding of source code repository tools (e.g., GIT).
• Foundation in Secure Software Lifecycle Management and Vulnerability Management.
• Strong debugging and troubleshooting skills.
• Security certifications preferred.
• Basic understanding and experience in supporting ITIL activities like Incident and Problem Management.

Responsibilities

• Provide PKI administration, engineering, and operations support for PKI components and cryptographic tools.
• Contribute to development and delivery of Data Protection solutions.
• Build and maintain relationships with internal/external customers and vendors to formulate remediation solutions.
• Assist in implementing secure software lifecycle and vulnerability management practices.
• Support ITIL processes like Incident and Problem Management as needed.

Skills

PKI/Cryptography

SOX controls

Linux/Windows

Python

PowerShell

Bash

Ansible

GIT

ITIL

Communication

Problem solving

Tools

GIT

Ansible

Python

PowerShell

Bash

JSON/XML/YAML

Job description

At Freddie Mac, our mission of Making Home Possible is what motivates us, and its at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Continue your career journey where your work contributes to a greater purpose.

Position Overview:

We are seeking a Senior PKI/Cryptography Engineer to join theData Protectionteam within the Information Security Engineering department of the Information Technology Division.The engineeris responsible forprovidingadministration, engineering,and operations supportforPKIapplicationcomponents,andcryptographic-based toolswithinData Protection.Read on to learn more about this exciting opportunity!

**This position has an on-callrequirement. **

Our Impact:

We reduce information risk by ensuring and enhancing the Confidentiality, Availability, and Integrity of Information systems at Freddie Mac.

Your Impact:

In this role, youwill help fulfill the Information Security department's vision of reducing information risk by ensuring and enhancing the Confidentiality, Availability, and Integrity of Information systems at Freddie Mac. Youwill work towards thedevelopment and delivery of our technical solutions related toData Protection. You will build, develop, andmaintainrelationships with internal and external customers, and vendors to formulate remediation solutions for issues relatedwithInformation Security.

Qualifications:

• 5-7+ years in IT security, including execution, testing, and maintenance of SOX controls.
• 5+ years of hands-on experience in PKI and cryptography, with a strong understanding of data encryption, SaaS security solutions, and cloud client security.
• Knowledge of security and cryptographic primitives like hashes, symmetric/asymmetric key algorithms, and signature algorithms.
• Experience with Linux and Windows, including server building and OS-based operations.
• Strong skills in partnering across IT and business lines to deliver and enhance Data Protection services.
• Familiarity with security regulations and frameworks (MITRE, CIS CSC, SOX), as well as NIST, IANA, RFCs, and IETF.
• Experience with HIPS clients, firewall rules, secure configurations, Linux, Network, and Windows commands.
• Proficiency in Python, BASH, PowerShell, and Ansible.
• Understanding of Java, JSON, XML, YAML, and Object-Oriented Programming and Design Patterns.
• Strong understanding of source code repository tools (e.g., GIT).
• Foundation in Secure Software Lifecycle Management and Vulnerability Management.
• Strong debugging and troubleshooting skills.
• Security certifications preferred.
• Basic understanding and experience in supporting ITIL activities like Incident and Problem Management.

Keys to Success:

• Self-motivated problem solver with innovative thinking.
• Effective communicator and collaborator within teams and with external entities.
• Ownership mindset with a proactive approach to problem-solving.
• Eagerness to learn new technologies and improve processes.
• Detail-oriented with a strong understanding of change impacts.
• Familiarity with ITIL guidelines and risk-based prioritization.
• Emphasis on automation and compliance with controls.
• Adaptability to change while meeting objectives.
• Strong mentorship and communication skills.
• Managing product lifecycles and ensuring thorough testing of upgrades.
• Ability to implement new products and oversee large-scale upgrades.
• Knowledgeable in network ports, protocols, and firewalls.

We consider all applicants for all positions without regard to gender, race, color, religion, national origin, age, marital status, veteran status, sexual orientation, gender identity/expression, physical and mental disability, pregnancy, ethnicity, genetic information or any other protected categories under applicable federal, state or local laws. We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site.

This position has an annualized market-based salary range of $126,000 - $190,000 and is eligible to participate in the annual incentive program. The final salary offered will generally fall within this range and is dependent on various factors including but not limited to the responsibilities of the position, experience, skill set, internal pay equity and other relevant qualifications of the applicant.