Senior Lead Cryptography Engineer

TIAA

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
NCNYTXIL
Employment
Full-time
Posted
3 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $188k
$132k $243k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $161,085–$214,000.

Based on 240 similar postings.

Employer

About TIAA

TIAA (Teachers Insurance and Annuity Association of America) is a leading Fortune 100 financial services organization and a premier provider of retirement services in the academic, research, medical, cultural, and governmental fields.

TIAA currently has 20 open roles on FindRole.

Most-posted roles

View all roles at TIAA

At a glance

TL;DR · Senior Lead Cryptography Engineer

JOB TITLE: Senior Lead Cryptography Engineer The Senior Lead Cryptography Engineer collaborates with various business units to automate certificate lifecycles, manage encryption keys, and oversee certificate authorities for TIAA systems. Working under limited supervision, this role involves developing robust technical solutions, performing advanced analytics, and providing engineering support for critical PKI, CLM, and KMS systems. The position requires designing and implementing secure automation workflows, conducting testing on EKM architecture, and acting as a primary subject matter expert for complex incidents. Key technologies and skills include experience with HSMs, cryptographic libraries, Post Quantum Cryptography, PowerShell, Bash, Python, and CI/CD pipelines. Candidates must also be familiar with IT automation tools like Salt, Ansible, and Puppet while aligning processes with NIST and NYDFS standards to enhance the enterprise security posture.

What you'll do

  • Act as the primary subject matter expert for PKI, CLM, and KMS systems.
  • Design and implement secure, robust, and supportable PKI, CLM, and KMS architectures.
  • Automate certificate and encryption key lifecycles using advanced analytics and technical solutions.
  • Provide engineering support for application servers, automation workflows, and Hardware Security Modules (HSMs).
  • Conduct testing and analysis of complex software systems to determine functionality and intent.
  • Identify new CLM/KMS patterns and develop solutions to support architectural designs.
  • Serve as the senior escalation point for complex encryption key management incidents and problems.
  • Coach and review the work of lower-level professionals to enhance their security knowledge.

What we're looking for

  • Bachelor's Degree or equivalent experience required.
  • 5+ years of professional information security experience required.
  • 7+ years of work experience preferred.
  • 3+ years of experience in PKI, CLM, or KMS required.
  • Experience and comfort speaking with senior leadership and business unit stakeholders (preferred).
  • Experience leading project workstreams and coordinating deliverables with junior team members (preferred).
  • Hands-on experience implementing encryption at rest, in transit, and/or in memory (preferred).
  • Familiarity with cryptographic libraries, algorithms, PQC, PowerShell, Bash, Python, CI/CD, and IT automation tools (preferred).

More like this

Similar roles

Senior Lead Security Engineer, PKI, Cryptography

JPMorgan Chase

Plano, TX 8 days ago
Cryptography Key Management Java Hardware Security Modules Key Management Service Public Key Infrastructure Threat Modeling Dynamic Analysis Secret Scanning Policy-as-Code Post-Quantum Cryptography System Design Penetration Testing
5+ yrs exp

Cryptography Engineer, Vice President

State Street

Quincy, MA +1 40 days ago
PKI X.509 Certificate Lifecycle Management Key Management Systems ACME EST SCEP Post-Quantum Cryptography Azure AWS CI/CD DevOps NIST PCI-DSS FFIEC KeyFactor DigiCert Microsoft ADCS Venafi Sectigo
7+ yrs exp

Cryptographic Engineer

3M

Maplewood, MN +1 79 days ago
PKI AWS Azure Key Vault Amazon Certificate Manager AWS Key Management Service Active Directory Certificate Services Venafi CipherTrust Manager Enterprise Secure Key Lifecycle Python PowerShell Digital Certificates Vulnerability Management Cloud Security
6+ yrs exp

Cryptography Engineer

Booz Allen Hamilton

Chantilly, VA 118 days ago
Post-Quantum Cryptography Python Rust C++ Public Key Infrastructure PKI Cloud Architecture Key Management Linux Windows SATCOM Digital Forensics Penetration Testing Secure Software Development Network Protocols Systems Engineering Cryptography