Cryptography Platform and Services Technologist Senior Lead
BNYAbout the role
Cryptography Platform and Services Technologist Senior Lead
At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.
Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.
We’re seeking a future team member for the role of Cryptography Platform and Services Technologist Senior Lead
to join our Cybersecurity Organization team. This role is in NYC/NJ or Lake Mary, Florida
In this role, you’ll make an impact in the following ways:
- Lead BNY Key Management solutions across BNY Enterprise
- Design, implement, and support Cryptography Key Management solution across BNY Enterprise.
- Design, implement, and support Cryptography Asset Management solution across BNY Enterprise.
- Ability to respond to requests from LOB, Internal Audit, and Federal Regulators on BNY Key Management ecosystem
- Train enterprise on PKI platforms, HSMs, and Key Management systems.
- Collaborate with compliance teams to align solutions with regulatory frameworks such as GDPR, DORA, NIST, and ISO 27001.
To be successful in this role, we’re seeking the following:
Experience and Education:
- Master’s in information security or related fields.
- 10-15+ years of work experience in cyber security, network security, architecture design, Key Management and PKI solutions.
- Proficiency in:
- Key Management (HSM, Thales Products (Ciphertruct, DPOD), Oracle Key Vault)
- HSM, RSA SecurID, PGP, cryptographic algorithms (e.g., RSA, AES), protocols (e.g., SSL/TLS, IPSec, SSH, Kerberos)
- Firewalls (Cisco, Juniper, Palo Alto Networks), VPN, IPSec, Identity and Access Management (IAM), SSO, multi-factor authentication (MFA), privileged access management (PAM), RADIUS, OAuth
- Security policies, disaster recovery, change management, risk assessment, threat modeling
- Cloud Services (AWS, Azure), Cisco routers and switches, IoT
- ISO/IEC 27001, PCI DSS, X.509, IEEE 802.1X, FISMA, NIST, MITRE, COBIT, ITIL
- Ability to train enterprise on HSMs and Key Management systems.
- Knowledge of Cryptographic algorithms and cryptographic principles, including digital signatures and blockchain systems.
- Familiarity with compliance frameworks such as GDPR, DORA, NIST, and ISO 27001.
- Experience with PKI platforms, HSMs, and Key Management systems.
- Experience in global Financial Services security ecosystem is preferred.
Desired Skills:
- Practical experience with PKI, HSM, RSA SecurID, PGP,cryptographic algorithms (e.g., RSA, AES), protocols (e.g., SSL/TLS, IPSec, SSH, Kerberos).
- Practical experience in Thales HSM, Thales SAAS Products, Thales Ciphertrust, Oracle Key Vault
- Hands-on experience with Thale’s products and Oracle key management products.
- Strong communication skills for presenting Key Management concepts to diverse technical and non-technical audiences.
- Certifications: Certified Information Systems Security Professional CISSP, Cisco Certified Entry Network Technician CCENT, Certified Technical Trainer CTT etc.
- Experience with Cybersecurity policies, cryptographic algorithms, Public Key Infrastructure (PKI), HSM, and key management systems.
At BNY, our culture speaks for itself, check out the latest BNY news at:
Here’s a few of our recent awards:
- America’s Most Innovative Companies, Fortune, 2025
- World’s Most Admired Companies, F
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s