SVP - Global PKI & Cryptography Strategy Leader

Goldman Sachs Group; Jersey City (NJ); Presencial; USD 130.000 - 250.000; Jornada completa

Descripción de la vacante

Goldman Sachs Group is seeking a Senior Vice President for Certificate and PKI Technologies in Jersey City, NJ. The role leads global PKI strategy, engineering, and operations, shaping cryptographic services across Kubernetes, service meshes and hybrid-cloud environments.

The candidate will own CA/RA, HSM, KMS, and policy governance, driving automation to prevent outages and ensuring compliance with industry standards. A focus on incident response and external partnerships is required.

Formación

• 10+ years of experience in cybersecurity and IT, with at least 8+ years in PKI, cryptography, and data protection.
• Deep understanding of asymmetric/symmetric cryptography, TLS/SSL, SSH key management, code signing, and HSM management.
• CISSP, CISM, or cryptographic certifications preferred.

Responsabilidades

• Define and execute global PKI strategy and roadmap.
• Oversee CA/RA, HSM, and KMS design, deployment, and operations.
• Drive automated certificate lifecycle management (ACME/EST/SCEP) to reduce outages.
• Ensure compliance with WebTrust, SOC2, ISO 27001; publish CP/CPS.
• Architect PKI integrations for Kubernetes, service meshes, and hybrid clouds.
• Act as escalation point for cryptographic vulnerabilities and outages.
• Represent the company in industry groups on cryptographic trends, PQC.

Conocimientos

Strategic Leadership

Infrastructure & Engineering

Automation & Lifecycle Management

Compliance & Governance

Cloud & Modern Tech Integration

Incident Response

Vendor & Industry Representation

Educación

Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or related field

Herramientas

ACME

EST

SCEP

KMS

Descripción del empleo

Goldman Sachs Group is seeking a Senior Vice President for Certificate and PKI Technologies in Jersey City, NJ. The role leads global PKI strategy, engineering, and operations, shaping cryptographic services across Kubernetes, service meshes and hybrid-cloud environments.

The candidate will own CA/RA, HSM, KMS, and policy governance, driving automation to prevent outages and ensuring compliance with industry standards. A focus on incident response and external partnerships is required.