Senior PKI & Cryptography Engineer — Data Protection

Freddie Mac; McLean (VA); On-site; USD 126,000 - 190,000; Full time

Job summary

Freddie Mac is seeking an experienced Senior PKI/Cryptography Engineer to join the Data Protection team within IT Security Engineering. The role emphasizes PKI administration, cryptographic tooling, and collaboration with internal and external partners to strengthen data protection controls.

This position includes an on-call requirement, aligns with SOX controls, and offers a market-based salary with annual incentive opportunities.

Qualifications

• 5-7+ years in IT security, including execution, testing, and maintenance of SOX controls.
• 5+ years of hands-on experience in PKI and cryptography, with a strong understanding of data encryption, SaaS security solutions, and cloud client security.
• Knowledge of security and cryptographic primitives like hashes, symmetric/asymmetric key algorithms, and signature algorithms.
• Experience with Linux and Windows, including server building and OS-based operations.
• Strong skills in partnering across IT and business lines to deliver and enhance Data Protection services.
• Familiarity with security regulations and frameworks (MITRE, CIS CSC, SOX), as well as NIST, IANA, RFCs, and IETF.
• Experience with HIPS clients, firewall rules, secure configurations, Linux, Network, and Windows commands.
• Proficiency in Python, BASH, PowerShell, and Ansible.
• Understanding of Java, JSON, XML, YAML, and Object-Oriented Programming and Design Patterns.
• Strong understanding of source code repository tools (e.g., GIT).
• Foundation in Secure Software Lifecycle Management and Vulnerability Management.
• Strong debugging and troubleshooting skills.
• Security certifications preferred.
• Basic understanding and experience in supporting ITIL activities like Incident and Problem Management.

Responsibilities

• Provide PKI administration, engineering, and operations support for PKI components and cryptographic tools.
• Contribute to development and delivery of Data Protection solutions.
• Build and maintain relationships with internal/external customers and vendors to formulate remediation solutions.
• Assist in implementing secure software lifecycle and vulnerability management practices.
• Support ITIL processes like Incident and Problem Management as needed.

Skills

PKI/Cryptography

SOX controls

Linux/Windows

Python

PowerShell

Bash

Ansible

GIT

ITIL

Communication

Problem solving

Tools

GIT

Ansible

Python

PowerShell

Bash

JSON/XML/YAML

Job description

Freddie Mac is seeking an experienced Senior PKI/Cryptography Engineer to join the Data Protection team within IT Security Engineering. The role emphasizes PKI administration, cryptographic tooling, and collaboration with internal and external partners to strengthen data protection controls.

This position includes an on-call requirement, aligns with SOX controls, and offers a market-based salary with annual incentive opportunities.