SVP, Global PKI & Crypto Strategy

Goldman Sachs Bank AG; Jersey City (NJ); On-site; USD 130,000 - 250,000; Full time

Job summary

Goldman Sachs is seeking a Senior Vice President to lead global PKI strategy, cryptography, and certificate lifecycle management within the IAM organization in Jersey City. You will architect scalable PKI solutions, manage CAs/CSs, and drive modernization across hybrid-cloud environments.

The role emphasizes governance, audit readiness, incident response, and collaboration with security vendors, with a focus on PQC trends and industry standards.

Qualifications

• 10+ years of experience in cybersecurity and IT, with at least 8+ years in PKI/cryptography leadership.
• Deep understanding of TLS/SSL, asymmetric/symmetric cryptography, SSH key management, code signing.
• Experience with PKI governance, CP/CPS, and audit readiness.

Responsibilities

• Define and execute global PKI strategy and enterprise certificate management roadmap.
• Oversee design and operation of CAs, RAs, HSMs, and KMS.
• Drive automated certificate lifecycle management to reduce outages and manual work.
• Ensure compliance with cryptographic standards and regulatory requirements.
• Architect PKI solutions for Kubernetes, service meshes, and hybrid-cloud deployments.
• Lead incident response for cryptographic vulnerabilities and outages.
• Manage external CA/vendor relationships and stay ahead of cryptographic trends.

Skills

Strategic Leadership

Infrastructure & Engineering

Automation & Lifecycle Management

Compliance & Governance

Cloud & Modern Tech Integration

Incident Response & Risk Management

Vendor & Industry Representation

Education

Bachelor’s or Master’s degree in Computer Science or related field

Tools

HSM management

Job description

Goldman Sachs is seeking a Senior Vice President to lead global PKI strategy, cryptography, and certificate lifecycle management within the IAM organization in Jersey City. You will architect scalable PKI solutions, manage CAs/CSs, and drive modernization across hybrid-cloud environments.

The role emphasizes governance, audit readiness, incident response, and collaboration with security vendors, with a focus on PQC trends and industry standards.