Cryptographic Key Management Engineer
State Street is seeking a highly skilled Cryptographic Key Operations Engineer to manage the lifecycle of cryptographic keys across cloud on-premises infrastructure and IoT environments. This role ensures the secure generation distribution rotation revocation and retirement of encryption keys while maintaining compliance with regulatory and security policies.
Key Responsibilities:
* Support the daily operations and security of cryptographic key management ensuring adherence to financial industry regulations.
* Drive the secure generation storage distribution rotation revocation and retirement of encryption keys across cloud on-premises and IoT environments.
* Monitor and respond to key management incidents such as key compromise expiration or policy violations ensuring timely remediation and risk mitigation.
* Maintain the availability integrity and security of key management infrastructure troubleshooting incidents and ensuring adherence to SLAs.
* Collaborate with security cloud infrastructure and DevSecOps teams to integrate cryptographic services into enterprise applications infrastructure and IoT security frameworks.
* Optimize and automate key management processes leveraging APIs key management platforms KMS security orchestration tools and infrastructure-as-code IaC methodologies.
Requirements:
* Bachelor's degree in Computer Science Cybersecurity Information Security or related field or equivalent work experience.
* 3+ years of experience in key management operations cryptographic security or information security within a financial institution or other regulated environment.
* Strong expertise in cryptographic key lifecycle management including symmetric and asymmetric encryption PKI and HSMs Hardware Security Modules.
* Experience with enterprise key management solutions AWS KMS Azure Key Vault HashiCorp Vault OCI KMS.
* Familiarity with financial security regulations and standards such as PCI DSS FIPS 140-2/3 and NIST guidelines.
Preferred Qualifications:
* Experience with IoT device security and embedded encryption techniques.
* Experience with SIEM tools for key access monitoring.
* Security certifications such as CISM CISSP CCSP and AWS Security Specialty.
* Experience with post-quantum cryptography PQC readiness and emerging cryptographic frameworks.
* Experience with JIRA and Confluence.
This is an exciting opportunity to contribute to the development of our technology function Global Technology Services GTS which is vital to State Street and is the key enabler for our business to deliver data and insights to our clients.