Senior SSH & Machine Identity Architect

State Street; Berwyn (PA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Life/Medical/Dental/Vision insurance

Paid time off (PTO)

Employee Assistance Program

Performance-based incentives

Tax-advantaged savings plans

Job summary

State Street is seeking a senior engineer to own the enterprise SSH governance, including the planned SSH Certificate Authority, key lifecycle management, and machine identity automation. You will lead design, drive onboarding of SSH use cases, and collaborate with infrastructure, cloud and security teams to strengthen controls across the organization.

You will connect SSH governance with broader cryptographic services strategy, develop automation, and support audit and risk inquiries, shaping

Qualifications

• 7+ years of cybersecurity, infrastructure, Linux, identity, PKI or privileged access engineering experience.
• Strong understanding of SSH, SSH keys, SSH certificates, Linux/Unix access patterns and privileged access controls.
• Experience with certificate authorities, PKI concepts, machine identity management and secrets management platforms.
• Experience automating identity, access or infrastructure workflows using scripts, APIs or orchestration tools.
• Strong knowledge of enterprise risk, audit evidence, operational controls and security standards.
• Strong ability to influence across multiple technology teams and drive adoption of new security capabilities.

Responsibilities

• Lead engineering and implementation of the enterprise SSH Certificate Authority capability.
• Define SSH certificate, SSH key lifecycle, trust and access patterns across the organization.
• Drive SSH key discovery, ownership mapping, remediation and lifecycle governance.
• Develop automation for SSH certificate issuance, rotation, revocation and reporting.
• Partner with infrastructure, Linux, cloud, privileged access and application teams to onboard SSH use cases.
• Align SSH capabilities with broader machine identity management, PKI and crypto operations strategies.
• Support vaults/secrets management integration points where SSH credentials or keys require stronger control.
• Define operational runbooks, monitoring requirements and escalation paths for SSH-related services.
• Support audit, risk and regulatory inquiries related to SSH controls and machine identities.
• Contribute to the long-term vision for centralized crypto operations support.

Skills

SSH concepts

SSH certificates

Linux/Unix access patterns

Privileged access controls

Automation scripting

Education

7+ years in cybersecurity/infra/Linux/identity/PKI or privileged access

Tools

HashiCorp Vault

Job description

State Street is seeking a senior engineer to own the enterprise SSH governance, including the planned SSH Certificate Authority, key lifecycle management, and machine identity automation. You will lead design, drive onboarding of SSH use cases, and collaborate with infrastructure, cloud and security teams to strengthen controls across the organization.

You will connect SSH governance with broader cryptographic services strategy, develop automation, and support audit and risk inquiries, shaping