Cryptography Engineer, Vice President

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Quincy, MABoston, MA
Salary
$120,000–$202,500 / yr
Employment
Full-time
Posted
4 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $188k
This role $161k
$108k most similar roles pay here $232k

This role pays less than 70% of similar roles. Most pay $158,900–$216,250 — the shaded band above. At the midpoint, this role pays about $161k versus about $188k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 245 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 174 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Cryptography Engineer, Vice President

The Cryptography Engineer, Vice President serves as a senior member of the Global Cybersecurity organization responsible for the design, engineering, automation, and operation of enterprise cryptographic services. This individual will manage Public Key Infrastructure (PKI) platforms, certificate lifecycle management, key management solutions, and cryptographic security controls across the firm. Day-to-day responsibilities include implementing automated technologies like ACME, EST, SCEP, and API integrations while managing machine identities, code signing, and SSH certificates. The role requires expertise in X.509 certificates, HSMs, and cloud environments including Azure and AWS. Candidates must possess skills in cryptographic algorithms, NIST standards, and PCI-DSS compliance to address challenges regarding cryptographic agility and post-quantum readiness. This position focuses on securing digital identities and ensuring secure communications by modernizing legacy systems into automated, enterprise-standard certificate management platforms for infrastructure and application teams.

What you'll do

  • Design, implement, and operate enterprise PKI platforms, Certificate Authorities, and trust services.
  • Manage the full lifecycle of digital certificates including issuance, renewal, revocation, and monitoring.
  • Lead the engineering and adoption of certificate automation technologies like ACME, EST, SCEP, and API integrations.
  • Design and maintain enterprise key management solutions for applications, infrastructure, cloud platforms, and machine identities.
  • Develop automated solutions to improve operational efficiency, scalability, and compliance across cryptographic services.
  • Drive migration from legacy certificates to enterprise-standard management platforms while ensuring cryptographic agility.
  • Contribute to the firm's post-quantum cryptography (PQC) strategy and related security initiatives.
  • Conduct security architecture reviews to ensure cryptographic controls meet corporate standards and regulatory requirements.

What we're looking for

  • Bachelor's degree in Computer Science, Engineering, Information Security, or a related field.
  • 7+ years of experience in Cybersecurity, Cryptography, PKI, or Security Engineering.
  • 5+ years of experience designing and operating enterprise PKI and certificate management solutions.
  • Deep understanding of PKI, X.509 certificates, cryptographic algorithms, and security architectures.
  • Experience with HSMs, key management systems, and cloud-native security services in Azure and AWS.
  • Knowledge of regulatory standards such as NIST, PCI-DSS, and FFIEC.
  • Professional certifications like CISSP, CCSP, GIAC, or Security+ (preferred).
  • Experience with KeyFactor, DigiCert, Microsoft ADCS, Venafi, Sectigo, cryptographic agility, or post-quantum cryptography (preferred).

More like this

Similar roles

Head of Cryptography

State Street

Quincy, MA +4 43 days ago
Cryptography Key Management Systems (KMS) Hardware Security Modules (HSM) Secrets Management PKI Certificate Management Post-Quantum Cryptography Cloud Security Kubernetes Containerized Workloads Machine Identity Encryption at Rest Encryption in Transit Tokenization Digital Signatures NIST ISO 27001 PCI DSS
10+ yrs exp

Cryptographic Engineer

3M

Maplewood, MN +1 44 days ago $109,202–$133,469
PKI Digital Certificates AWS Amazon Certificate Manager (ACM) AWS Key Management Service (KMS) Azure Key Vault Venafi Python PowerShell Cloud Security
6+ yrs exp Hybrid

Cryptography Engineer

Booz Allen Hamilton

Chantilly, VA 83 days ago $112,800–$257,000
Post-Quantum Cryptography Python Rust C++ PKI Cloud Architecture Key Management Linux Windows SATCOM Trusted Compute Digital Forensics Penetration Testing Cybersecurity Risk Management Information Assurance Secure Software Development Network Protocols Systems Engineering

Post Quantum Cryptography Engineer

Booz Allen Hamilton

Washington, DC 83 days ago $77,600–$176,000
Post-Quantum Cryptography Python Rust C++ AWS EC2 IAM VPC KMS Linux Windows Network Engineering Public Key Infrastructure Cybersecurity Digital Forensics Penetration Testing Secure Software Development Information Assurance

Post Quantum Cryptography Engineer

Booz Allen Hamilton

Ashburn, VA 64 days ago $77,600–$176,000
Post-Quantum Cryptography Python Rust C++ Cybersecurity Network Engineering Public Key Infrastructure Linux Windows Cloud Architecture Key Management Trusted Compute Digital Forensics Penetration Testing Information Assurance Risk Management Governance, Risk, and Compliance

Public Key Infrastructure Engineer

Booz Allen Hamilton

Washington, DC +1 17 days ago $86,800–$198,000
PKI Identity and Access Management (IAM) Active Directory Certificate Services Certificate Authority Linux Asymmetric Cryptography Keyfactor Venafi ACME SCEP Zero Trust Security+