Cryptographic Agility & Post-Quantum (PQC) Engineer

State Street

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Quincy, MAClifton, NJLondon, England, United KingdomAustin, TXBerwyn, PA
Salary
$120,000–$202,500 / yr
Employment
Full-time
Posted
73 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $186k
This role $161k
$108k $232k
below market most similar roles pay here above market

This role pays less than 70% of similar roles. Most pay $152,706–$219,362 — the blue band above. At the midpoint, this role pays about $161k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 330 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 230 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Cryptographic Agility & Post-Quantum (PQC) Engineer

The Cryptographic Agility & Post-Quantum (PQC) Engineer joins the cybersecurity team to shape and deliver the enterprise cryptographic modernization strategy. This role focuses on preparing the organization for emerging cryptographic threats, specifically the impact of quantum computing. You will mature the Cryptographic Agility program by developing an inventory of cryptographic assets, identifying systems using vulnerable or legacy algorithms, and defining remediation migration paths. Key responsibilities include evaluating NIST-approved PQC standards, piloting PQC-enabled technologies, and producing risk metrics. Required skills include expertise in encryption technologies, PKI, certificate management, and key management systems. You must be proficient in cloud platforms like AWS, Azure, OCI, or Google Cloud Platform, and possess experience with automation tools such as Python, PowerShell, Bash, Terraform, Ansible, and Jenkins.

What you'll do

  • Maintain an inventory of cryptographic assets, dependencies, algorithms, protocols, certificates, and keys across all platforms.
  • Identify systems using vulnerable or legacy cryptographic algorithms and define remediation and migration strategies.
  • Evaluate emerging post-quantum cryptography (PQC) standards and NIST-approved cryptographic algorithms.
  • Define approved migration paths, transition frameworks, and implementation guidance for application and platform teams.
  • Pilot and validate PQC-enabled technologies, services, and solutions for future enterprise adoption.
  • Develop standards, procedures, and technical guidance to support cryptographic agility and quantum readiness.
  • Produce metrics and executive reporting to track cryptographic risk and migration progress across the enterprise.

What we're looking for

  • Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, Mathematics, or a related discipline, or equivalent work experience.
  • 5+ years of experience in cybersecurity, security engineering, encryption, PKI, key management, infrastructure security, or a related field.
  • Working knowledge of cryptographic algorithms, protocols, and security controls used in enterprise environments.
  • Experience with enterprise operating systems, cloud platforms (AWS, Azure, OCI, or GCP), and distributed application architectures.
  • Exposure to post-quantum cryptography concepts, cryptographic inventory/discovery tools, or cryptographic risk assessments.
  • Experience supporting security compliance frameworks, cybersecurity standards, and audit activities.
  • Experience developing scripts or automation solutions using languages such as Python, PowerShell, Bash, Java, C#, or Go.
  • Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Jenkins, Harness, or similar CI/CD platforms.
  • Industry certifications such as CISSP, Certified Encryption Specialist (ECES), or similar certifications (preferred).

More like this

Similar roles

Post Quantum Cryptography Engineer

Booz Allen Hamilton

Ashburn, VA 73 days ago $77,600–$176,000
Post Quantum Cryptography Python Rust C++ Cybersecurity Network Engineering Public Key Infrastructure Linux Windows Cloud Architecture Digital Forensics Penetration Testing Systems Architecture Information Assurance Key Management Secure Software Development

Commercial Post Quantum Cryptography Director

Booz Allen Hamilton

Washington, D.C. +7 71 days ago $162,800–$303,000
Post-Quantum Cryptography Classical Cryptography Secure Communications NIST Publications Cryptographic Protocols Quantum-Safe Technologies Cryptographic Inventories Security Reviews EU Cyber Regulations
8+ yrs exp

Cryptographic Engineer

3M

Maplewood, MN +1 52 days ago $109,202–$133,469
PKI AWS Azure Key Vault Amazon Certificate Manager AWS Key Management Service Venafi CipherTrust Manager Enterprise Secure Key Lifecycle Active Directory Certificate Services Python PowerShell Digital Certificates Vulnerability Management Data Migration CISSP CISM
6+ yrs exp

Senior Software Engineer, PKI & Cryptographic Systems

Cloudflare, Inc

Austin, TX +2 11 days ago
PKI Applied Cryptography X.509 ACME Certificate Transparency HSM PKCS#11 FIPS 140-2 Go Rust C/C++ Distributed Systems BoringSSL OpenSSL Kubernetes Post-Quantum Cryptography TLS ASN.1/DER RFC 5280
5+ yrs exp Hybrid

Encryption Engineer

State Street

Quincy, MA +5 71 days ago $120,000–$202,500
Cryptography Key Management Secrets Management Certificate Management DevSecOps CI/CD Infrastructure-as-Code Python Java Go C# JavaScript TypeScript PowerShell Bash Terraform CloudFormation AWS Azure GCP OCI Kubernetes OpenShift NIST PCI DSS ISO 27001
8+ yrs exp

Encryption-as-a-Service (EaaS) Platform Engineer

State Street

Quincy, MA +7 11 days ago
Encryption Key Management Secrets Management Platform Engineering AWS Microsoft Azure Google Cloud Platform OCI Python PowerShell Bash Java C# Go Terraform Ansible Jenkins Harness CI/CD Docker Kubernetes OpenShift REST APIs Spring Boot Microservices Git Bitbucket Fortanix DSM AWS KMS Azure Key Vault Google Cloud KMS
5+ yrs exp