VP, Cryptography Engineering - PKI, Key Management & PQC

State Street; Boston (MA); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street seeks a Cryptography Engineer, VP to join the Global Cybersecurity organization. You will design, build, automate, and operate enterprise cryptographic services, PKI, certificate lifecycle management, and key management across the firm.

You will partner with application, infrastructure, and cloud teams to deliver secure, scalable cryptographic capabilities, drive PQC initiatives, and support audits, regulatory, and risk management activities. Leadership required.

Qualifications

• Bachelor's degree in CS, Engineering, or information security.
• 7+ years in cybersecurity, cryptography, PKI, or security engineering.
• 5+ years designing and operating enterprise PKI and certificate management.
• Experience with PKI platforms such as KeyFactor, DigiCert, Venafi, or Sectigo.

Responsibilities

• Design, implement, and operate enterprise PKI platforms and CAs.
• Manage the lifecycle of digital certificates including issuance, renewal, revocation.
• Lead automation of certificate processes using ACME, EST, SCEP, and APIs.
• Develop enterprise key management and cryptographic controls.
• Collaborate with cloud and application teams to onboard systems.
• Support audits, compliance, and risk management activities.

Skills

PKI

X.509

Cryptography

Cert lifecycle

HSMs

Cloud security

DevOps CI/CD

IAM concepts

Post-Quantum

Automation

Education

Bachelor's degree in CS/Engineering/InfoSec

CISSP / CCSP / GIAC (preferred)

5+ years PKI experience or similar

Tools

KeyFactor

DigiCert

Microsoft ADCS

Venafi

Sectigo

PKI tooling

Job description

State Street seeks a Cryptography Engineer, VP to join the Global Cybersecurity organization. You will design, build, automate, and operate enterprise cryptographic services, PKI, certificate lifecycle management, and key management across the firm.

You will partner with application, infrastructure, and cloud teams to deliver secure, scalable cryptographic capabilities, drive PQC initiatives, and support audits, regulatory, and risk management activities. Leadership required.