This role pays more than
52%
of similar roles. Most pay
$126,800–$194,397
— the shaded band above.
At the midpoint, this role pays about
$161k
versus about
$161k
for comparable roles.
Based on 240 similar postings.
Employer
About State Street
State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody
State Street currently has
301 open roles
on FindRole.
Listed pay typically runs
$120,000–$202,500
across 213 roles with salary data.
As an Encryption Engineer (DevSecOps & SDLC), you will join the team to advance an Encryption-by-Design strategy by embedding standardized encryption and key management controls directly into the Software Development Life Cycle, DevSecOps pipelines, and enterprise platform engineering patterns. You will build reusable automation, APIs, Infrastructure-as-Code modules, and reference architectures to ensure secure-by-default capabilities for application teams. Your daily work involves integrating secrets management, certificate lifecycle management, and encryption services into CI/CD toolchains while establishing automated guardrails to validate requirements. You will utilize technologies including Terraform, CloudFormation, Kubernetes, OpenShift, and cloud platforms like AWS, Azure, OCI, or GCP. Proficiency in Python, Java, Go, C#, JavaScript, TypeScript, PowerShell, or Bash is required. This role solves the challenge of replacing fragmented manual security processes with scalable, automated controls to ensure consistent data protection across cloud and on-premises environments.
Embed encryption and key management controls into SDLC processes, DevSecOps pipelines, and platform engineering patterns.
Design and implement secure-by-default encryption capabilities that allow application teams to adopt cryptographic controls easily.
Develop reusable automation, APIs, Infrastructure-as-Code modules, and reference architectures to accelerate enterprise encryption adoption.
Integrate key management, secrets management, and certificate management into standard developer workflows and CI/CD toolchains.
Establish automated guardrails and policy-driven controls to validate encryption requirements throughout the software development lifecycle.
Create technical standards, implementation guidance, and developer enablement materials to simplify the adoption of security capabilities.
Monitor and assess encryption implementations to identify control gaps and opportunities for standardization or remediation.
Support regulatory and audit initiatives by ensuring encryption controls are consistently deployed and provide automated compliance evidence.
What we're looking for
Bachelor's degree in Computer Science, Information Security, Software Engineering, IT, Cybersecurity, or a related field, or equivalent practical experience.
8+ years of experience in software engineering, DevSecOps, platform engineering, cloud engineering, cybersecurity engineering, or a related technical field.
Experience integrating security controls into SDLC processes, CI/CD pipelines, and modern software delivery platforms.
Working knowledge of encryption technologies, cryptographic key management, secrets management, certificate lifecycle management, and enterprise data protection controls.
Proficiency in one or more programming or scripting languages such as Python, Java, Go, C#, JavaScript, TypeScript, PowerShell, or Bash.
Experience with Infrastructure-as-Code tools like Terraform or CloudFormation and experience with cloud platforms including Azure, AWS, OCI, or GCP.
Familiarity with containerization and platform technologies including Kubernetes and OpenShift.
Knowledge of security and compliance frameworks such as NIST, PCI DSS, ISO 27001; experience with HSMs, KMS, or relevant certifications are preferred.