Cryptographic Software Integration Engineer, Vice President, Hybrid
State StreetAbout the role
Who we are looking for
We are seeking a skilled Cryptographic Software Integration Engineer to design, develop, and implement solutions that enhance the security, efficiency, and scalability of our enterprise cryptographic infrastructure. This role will focus on integrating key management systems (KMS) and hardware security modules (HSMs) with enterprise applications, cloud environments, IoT and DevSecOps workflows. The Ideal candidate has experience with secure practices for automation, scripting, API development, and integration of solutions within financial or highly regulated environments.
What you will be responsible for
- Design and implement integrations between cryptographic key management systems and enterprise applications, cloud platforms, and security tools.
- Develop and maintain APIs, microservices, and automation scripts to streamline cryptographic operations.
- Enable seamless integration with multi-cloud key management services (AWS KMS, Azure Key Vault, OCI KMS)
- Collaborate with security architects, application teams, and DevSecOps engineers to embed encryption management into CI/CD pipelines.
- Automate key lifecycle processes for key generation, rotation, distribution, revocation, and decommissioning.
- Build monitoring and alerting mechanisms to detect cryptographic anomalies and improve operational efficiency.
- Ensure automation and integrations align with cryptographic policies, compliance, and regulations (PCI DSS, GDPR, FIPS 140-2/3), and security best practices.
- Work closely with risk and compliance teams to provide audit trails and access control mechanisms for key and certificate operations.
- Assist in vulnerability management and patching of cryptographic components and automation workflows.
- Troubleshoot integration and automation issues, ensuring high availability and reliability of cryptographic services.
- Stay up to date on emerging encryption technologies, cloud security trends, and automation frameworks.
- Provide technical documentation and training for internal teams on cryptographic integration best practices.
What we value
These skills will help you succeed in this role:
- An understanding of key management.
- Strong problem solving and analytical skills.
- Ability to effectively drive results, provide feedback/direction, and manage and build relationships with leaders and team members in a geographically dispersed team environment.
- Strong organizational, multi-tasking, and prioritizing skills
Education & Required Qualifications
- Bachelor's degree in Computer Science, Information Security, or a related field or equivalent work experience.
- Minimum of 8+ years of experience in software development, with a focus on integration and security within a financial institution or other highly regulated industries.
- Minimum of 5+ years of experience utilizing one or more high-level languages such as Python, Ruby, PowerShell, Bash, or Java for pipeline development and system to system integrations.
- Strong understanding of KMS concepts, key management lifecycle, hardware security modules (HSMs), and cryptographic principles and algorithms (AES, RSA, ECC).
- Strong understanding of DevOps practices such as Continuous Integration/Continuous Delivery (CI/CD) and Infrastructure as Code (IaC).
- Proven experience in developing, deploying, configuring, and managing software within cloud platforms such as AWS and Azure and their container services (EKS, AKS, GKE).
- Proven experience developing and deploying microservices, including experience with API design, service discovery, and communication patterns (e.g., REST, messaging queues) with a focus on data security.
Preferred Qualifications
- Experience with one or more infrastructure automation and management tools such as Terraform, Ansible, and Chef or equivalent.
- Direct experience with one or more key management systems (KMS) such as HashiCorp Vault, AWS KMS, Azure Key Vault, or OCI KMS.
- Knowledge of blockchain technology and its cryptographic principles.
- Certifications such as CISSP, CISM, AWS Security Specialty, HashiCorp Certified Vault Associate or CCSK.
- Familiarity with security frameworks such as NIST 800-57, ISO 27001 or PCI DSS.
Are you the right candidate? Yes!
We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we donβt necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data driven decisions and are a good team player, you could be a gr
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights β in under 60 seconds.
Apply Now βGenerate Application KitFree account required β sign up in 30s