Vice President Security Engineer, IAM

Goldman Sachs

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Jersey City, NJ
Salary
$130,000–$250,000 / yr
Posted
24 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $183k
This role $190k
$116k $264k
below market most similar roles pay here above market

This role pays more than 60% of similar roles. Most pay $154,450–$212,000 — the blue band above. At the midpoint, this role pays about $190k versus about $183k for comparable roles.

Based on 240 similar postings.

Employer

About Goldman Sachs

Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.

Goldman Sachs currently has 82 open roles on FindRole.

Listed pay typically runs $130,000–$250,000 across 37 roles with salary data.

Most-posted roles

View all roles at Goldman Sachs

At a glance

TL;DR · Vice President Security Engineer, IAM

JOB TITLE: Security Engineer - Vice President - IAM - Jersey City The Senior Vice President of Certificate and PKI Technologies leads the Identity Security team within the Identity and Access Management business unit. This leader manages the global strategy, engineering, deployment, and operations for enterprise Public Key Infrastructure, cryptography, and digital certificate lifecycle management. Key responsibilities include overseeing internal and external Certificate Authorities, Registration Authorities, Hardware Security Modules, and Key Management Systems. The role involves driving automated certificate lifecycle management using protocols like ACME, EST, and SCEP while ensuring compliance with NIST, WebTrust, SOC2, and ISO 27001 standards. The position requires architecting scalable solutions for Kubernetes, service meshes, and hybrid-cloud environments across AWS, Azure, and GCP. Technical expertise must include TLS/SSL protocols, SSH key management, code signing, and Post-Quantum Cryptography trends.

What does a Security Engineer earn?

Median $192000 from 116 postings across 44 companies.

See salary data

What you'll do

  • Define and execute the global enterprise roadmap for PKI, certificate management, and cryptographic services.
  • Oversee the design, implementation, and maintenance of CAs, RAs, HSMs, and Key Management Systems.
  • Drive the adoption of automated certificate lifecycle management tools and protocols like ACME, EST, and SCEP.
  • Ensure strict adherence to cryptographic standards, industry regulations, and audit requirements like WebTrust and SOC2.
  • Architect scalable PKI solutions for Kubernetes, service meshes, and hybrid-cloud deployments.
  • Serve as the escalation point for cryptographic vulnerabilities, certificate outages, and emergency key rotations.
  • Manage relationships with external Certificate Authorities and security vendors.
  • Represent the organization in industry consortiums to monitor emerging trends like Post-Quantum Cryptography.

What we're looking for

  • Define and execute the global enterprise roadmap for PKI, certificate management, and cryptographic services.
  • Oversee the design, implementation, and maintenance of CAs, RAs, HSMs, and Key Management Systems.
  • Drive the adoption of automated certificate lifecycle management tools and protocols like ACME, EST, and SCEP.
  • Ensure adherence to cryptographic standards and regulations such as WebTrust, SOC2, and ISO 27001.
  • Architect scalable PKI solutions for Kubernetes, service meshes, and hybrid-cloud deployments (AWS, Azure, GCP).
  • Serve as the escalation point for cryptographic vulnerabilities, certificate-related outages, and emergency key rotations.
  • 10+ years of experience in cybersecurity and information technology (preferred).
  • 8+ years of dedicated leadership experience in PKI, cryptography, and data protection (preferred).
  • Deep understanding of asymmetric/symmetric cryptography, TLS/SSL protocols, SSH key management, code signing, and HSM management (preferred).
  • Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or a related field (preferred).
  • CISSP, CISM, or specialized cryptographic credentials (preferred).

More like this

Similar roles

Senior Security Architect - Vice President

Deutsche Bank

Jacksonville, FL 6 days ago $100,000–$157,000
Google Cloud Platform Azure Terraform Infrastructure-as-Code IAM RBAC NIST MITRE ATT&CK SaaS Cloud Security Encryption Network Security Application Security Data Protection Purple Teaming Breach & Attack Simulation Malware Analysis Incident Response Containers
Hybrid

Cryptography Engineer, Vice President

State Street

Quincy, MA +1 15 days ago $120,000–$202,500
PKI X.509 Certificate Lifecycle Management Key Management Systems ACME EST SCEP Post-Quantum Cryptography Azure AWS CI/CD DevOps NIST PCI-DSS FFIEC KeyFactor DigiCert Microsoft ADCS Venafi Sectigo
7+ yrs exp

Public Key Infrastructure Engineer

Booz Allen Hamilton

Washington, DC +1 28 days ago $86,800–$198,000
Public Key Infrastructure (PKI) Identity and Access Management (IAM) Active Directory Certificate Services Certificate Authority Linux Asymmetric Cryptography Keyfactor Venafi ACME SCEP Zero Trust Certificate Lifecycle Management

Cryptographic Agility & Post-Quantum (PQC) Engineer

State Street

Quincy, MA +4 75 days ago $120,000–$202,500
Cryptography Post-Quantum Cryptography (PQC) PKI Key Management Encryption Python PowerShell Bash Java C# Go Terraform Ansible Jenkins Harness CI/CD AWS Microsoft Azure OCI Google Cloud Platform infrastructure-as-code Security Engineering
5+ yrs exp

Senior Security IAM Engineer

Adobe

Seattle, WA +2 25 days ago $168,200–$310,100
Entra ID Active Directory LDAP 389DS Okta AWS Python PowerShell Splunk Grafana Telegraph PowerBI Public Key Infrastructure MFA SaaS Security Posture Management UNIX Linux Windows Zero Trust

Security Engineering Vice President

Goldman Sachs

New York, NY 106 days ago $150,000–$250,000
AWS Azure GCP OCI Python PowerShell Bash AI/ML Security CI/CD Cloud Security Security Engineering IAM Threat Modeling Vulnerability Management Incident Response MLOps SageMaker Vertex AI Databricks NIST CSF ISO 27001 OWASP LLM Top 10 MITRE ATLAS
10+ yrs exp