SSH & Machine Identity Engineer

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Quincy, MABerwyn, PAPrinceton, NJClifton, NJAustin, TX
Salary
$120,000–$202,500 / yr
Posted
36 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $175k
This role $161k
$108k most similar roles pay here $232k

This role pays less than 63% of similar roles. Most pay $147,875–$202,850 — the shaded band above. At the midpoint, this role pays about $161k versus about $175k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · SSH & Machine Identity Engineer

The senior SSH & Machine Identity Engineer will provide dedicated engineering ownership for enterprise SSH capabilities, including the planned SSH Certificate Authority, key lifecycle management, and machine identity governance across the organization. This role involves leading the design and adoption of SSH CA capabilities while establishing stronger standards and automation for SSH infrastructure. Day-to-day responsibilities include defining certificate trust patterns, driving key discovery and remediation, developing automation for issuance and rotation, and partnering with infrastructure and cloud teams to onboard use cases. The position requires expertise in PKI concepts, Linux/Unix access patterns, privileged access controls, and secrets management platforms. Candidates must utilize scripts, APIs, or orchestration tools to automate workflows while aligning capabilities with broader cryptographic services strategies to address enterprise risk, audit requirements, and regulatory inquiries regarding machine identities and secure SSH controls.

What you'll do

  • Lead the engineering and implementation of the enterprise SSH Certificate Authority capability.
  • Define SSH certificate, key lifecycle, trust, and access patterns across the organization.
  • Drive SSH key discovery, ownership mapping, remediation, and lifecycle governance.
  • Develop automation for SSH certificate issuance, rotation, revocation, and reporting.
  • Align SSH capabilities with broader machine identity, PKI, and cryptographic operations strategies.
  • Integrate vault and secrets management platforms for enhanced control of SSH credentials.
  • Create operational runbooks, monitoring requirements, and escalation paths for SSH services.
  • Support audit, risk, and regulatory inquiries regarding SSH controls and machine identities.

What we're looking for

  • Candidates must have at least 7 years of experience in cybersecurity, infrastructure, Linux, identity, PKI, or privileged access engineering.
  • Applicants must possess a strong understanding of SSH keys, certificates, Linux/Unix access patterns, and privileged access controls.
  • Experience with certificate authorities, PKI concepts, machine identity management, and secrets management platforms is required.
  • Candidates should have experience automating identity, access, or infrastructure workflows using scripts, APIs, or orchestration tools.
  • Strong knowledge of enterprise risk, audit evidence, operational controls, and security standards is required.
  • The role requires the ability to influence multiple technology teams and drive adoption of new security capabilities.
  • Candidates must demonstrate a strong ownership mindset to drive execution across various teams.
  • Ability to communicate clearly with technical teams, leadership, audit, and risk stakeholders is essential.

More like this

Similar roles

PKI Engineer

State Street

Quincy, MA 13 days ago $120,000$202,500
PKI Certificate Lifecycle Management Python PowerShell TLS SSL Microsoft ADCS Keyfactor DigiCert APIs Linux Windows Cloud Platforms Networking Automation ServiceNow
5+ yrs exp

Senior Security Engineer, Identity

Anduril Industries

Costa Mesa, CA +2 99 days ago $166,000$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD RBAC ABAC OPA Cedar AWS Azure GCP

Cyber Security Identity Staff Engineer

GEICO

Bethesda, MD +3 45 days ago $110,000$230,000
Identity and Access Management Active Directory Kerberos LDAP SAML SCIM OAuth OIDC Privileged Access Management REST APIs micro-services Linux Windows Python Go AWS GCP Azure MITRE CIS NIST
4+ yrs exp

Staff Identity Engineer

Okta Inc

Bellevue, WA +2 7 days ago $161,000$221,000
Okta OIDC OAuth 2.0 SAML 2.0 FIDO2 WebAuthn Terraform AWS GCP Azure API SOC 2 ISO 27001 FedRAMP
4+ yrs exp

Staff Identity Engineer

Okta Inc

Bellevue, WA +2 7 days ago $161,000$221,000
Okta OIDC OAuth 2.0 SAML 2.0 FIDO2 WebAuthn Terraform AWS GCP Azure API SOC 2 ISO 27001 FedRAMP
4+ yrs exp