Senior Lead Cryptography Engineer

This is a fully remote position, open to applicants in Illinois, +3 more states.

📋 Description

• Serve as the primary Subject Matter Expert (SME) for one or multiple PKI/CLM/KMS systems.

• Act as a senior escalation point for intricate EKM incidents and challenges.

• Provide engineering support for essential EKM systems and services, which include application servers, automation workflows, and Hardware Security Modules (HSMs).

• Identify potential new CLM/KMS patterns and develop corresponding solutions.

• Lead the design and implementation of secure, resilient, and maintainable PKI/CLM/KMS solutions.

• Analyze emerging technology trends to guide EKM roadmap decisions.

• Mentor, review, and assign tasks to junior IT security professionals.

• Act as an internal consultant on information security standards, complex issues, and best practices.

• Conduct and evaluate testing and analysis of sophisticated software systems.

• Communicate with cybersecurity risk and security operations teams to enhance the enterprise security posture.

• Collaborate with business units and stakeholders to automate the certificate lifecycle, manage encryption keys, and oversee certificate authorities.

⛳️ Requirements

• Bachelor’s Degree or equivalent experience is required.

• Over 5 years of professional experience in information security.

• A minimum of 3 years of experience in PKI, CLM, or KMS.

• Proficiency with one or more PKI/CLM/KMS systems.

• Experience in implementing encryption for data at rest, in transit, and/or in memory.

• Familiarity with cryptographic libraries, algorithms, and Post Quantum Cryptography (PQC).

• Experience leading, designing, and executing automated integration patterns for centrally managed tools.

• Knowledge of PowerShell, Bash, and/or Python.

• Understanding of CI/CD pipeline integration.

• Familiarity with IT automation tools such as Salt, Ansible, Puppet, Chef, Tines, and Bigfix.

• Knowledge of NIST and NYDFS standards.

• Hands-on experience in implementing and supporting security platforms, including firewalls, proxies, DLP, SIEM, endpoint security, vulnerability scanning, PKI, CLM, KMS, DoS prevention, and MFA.

• Understanding and experience in incident handling best practices.

• CISSP certification is required.

• Ability to perform duties in a sedentary role.

🏝️ Benefits

• Exceptional retirement program.

• Competitive offerings for health, wellness, and work-life balance.

• Support for financial, emotional, and physical well-being.

• Access to future-focused skills and AI tools.

• Meaningful learning opportunities and development pathways.

• Accessibility support available for the online application process.

• A drug-free and smoke-free workplace.