Encryption Engineer (DevSecOps & SDLC)
State Street20 hours ago
Base Salary
$120k - $203k/yr
Responsibilities
- Embed enterprise encryption and key management controls into SDLC processes, DevSecOps pipelines, and platform engineering patterns.
- Design secure-by-default encryption capabilities and reusable automation, APIs, templates, Infrastructure-as-Code modules, and reference architectures.
- Integrate key management, secrets management, certificate management, and encryption services into developer workflows and CI/CD toolchains.
- Establish automated guardrails, policy-driven controls, and architectural review triggers to validate encryption requirements and address exceptions.
- Partner with application development, platform engineering, cloud engineering, architecture, and cybersecurity teams across cloud and on-premises environments.
- Create technical standards, implementation guidance, and developer enablement materials for encryption and key management adoption.
- Monitor encryption implementations, identify control gaps and inconsistent practices, and drive standardization and remediation.
- Support regulatory, audit, and risk management initiatives through consistently deployed controls and automated compliance evidence.
- Modernize legacy encryption implementations and increase self-service adoption of enterprise encryption services.
- Reduce design exceptions, audit findings, operational risks, and manual security reviews through scalable engineering controls.
Requirements
- Bachelor's degree in Computer Science, Information Security, Software Engineering, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
- 8+ years of experience in software engineering, DevSecOps, platform engineering, cloud engineering, cybersecurity engineering, or a related technical field.
- Experience integrating security controls into SDLC processes, CI/CD pipelines, and modern software delivery platforms.
- Working knowledge of encryption technologies, cryptographic key management, secrets management, certificate lifecycle management, and enterprise data protection controls.
- Experience implementing security automation within development pipelines using Harness, Jenkins, or similar platforms.
- Hands-on experience with Infrastructure-as-Code technologies such as Terraform and CloudFormation or equivalent frameworks.
- Proficiency in one or more of Python, Java, Go, C#, JavaScript, TypeScript, PowerShell, or Bash.
- Experience with Microsoft Azure, Amazon Web Services, OCI, or Google Cloud Platform.
- Familiarity with Kubernetes, OpenShift, containerization, and cloud-native application architectures.
- Understanding of software architecture, secure coding, application security testing, and developer enablement.
- Knowledge of NIST, PCI DSS, ISO 27001, or equivalent security and compliance frameworks.
- Experience with enterprise key management platforms, Hardware Security Modules, cloud KMS services, secrets management platforms, or certificate management solutions is highly desirable.
- CISSP, CCSP, Azure Security Engineer Associate, AWS Security Specialty, Certified Kubernetes Security Specialist, or similar certifications are a plus.
Benefits
- Annual salary range of $120,000-$202,500, with the applicable range potentially varying by work location.
- Retirement savings plan with company match.
- Basic life, medical, dental, vision, long-term disability, and optional insurance coverage.
- Paid vacation, sick leave, short-term disability, and family care leave.
- Employee Assistance Program and eligibility for annual performance-based incentive awards.
- Eligibility for certain tax-advantaged savings plans.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
Tech Stack
AWSAzureBashC#GoGoogle Cloud PlatformHarnessJavaJavaScriptJenkinsKubernetesOpenShiftPowerShellPythonTerraformTypeScript
Categories
About State Street
State Street is a global custodian bank and asset manager serving institutional investors with investment servicing, fund accounting, trading/FX, data, and index/active strategies. Its products include State Street Global Advisors’ funds and ETFs, the Charles River Investment Management Solution, and the front-to-back State Street Alpha platform. Founded in 1792 and headquartered in Boston, the company is publicly traded on the NYSE (ticker: STT) and operates across major markets worldwide.