Senior Lead Cryptography Engineer
Teachers Insurance and Annuity Association of America (TIAA)4 days ago
Remote, United StatesStaff+
Base Salary
$160k - $210k/yr
Responsibilities
- Act as the primary subject-matter expert for one or more PKI, CLM, or KMS systems.
- Serve as the senior escalation point for complex EKM incidents and problems.
- Provide engineering support for PKI, CLM, and KMS application servers, automation workflows, and HSMs.
- Design and implement secure, robust, and supportable PKI, CLM, and KMS solutions and automated integration patterns.
- Test and analyze EKM architectures and complex software systems, identify improvement opportunities, and recommend enhancements.
- Analyze technology trends and stakeholder input to inform the EKM roadmap.
- Coach, review, and delegate work to lower-level IT security professionals.
- Consult internally on information-security standards, complex issues, and best practices.
- Collaborate with cybersecurity risk and security operations teams to improve the enterprise security posture.
Requirements
- Bachelor's degree or equivalent experience.
- At least 5 years of professional information security experience.
- At least 3 years of experience in one or more of Public Key Infrastructure, Certificate Life Cycle Management, or Key Management Systems.
- Preferred experience speaking with senior leadership and business stakeholders and leading project workstreams with junior team members.
- Preferred hands-on experience implementing encryption at rest, in transit, or in memory; cryptographic libraries and algorithms; and Post Quantum Cryptography.
- Preferred experience designing and implementing automated integrations for centrally managed tools.
- Familiarity with PowerShell, Bash, or Python and with IT automation tools such as Salt, Ansible, Puppet, Chef, Tines, or BigFix.
- Familiarity with aligning processes and standards to NIST and NYDFS.
- Preferred hands-on experience implementing and supporting security platforms including firewalls, proxy, DLP, SIEM, endpoint, vulnerability scanning, PKI, CLM, KMS, DoS prevention, and MFA.
- Understanding and experience with incident-handling best practices.
- CISSP certification is preferred.
Benefits
- Competitive benefits include a superior retirement program and health, wellness, and work-life offerings.
- The role is part of a collaborative in-office work environment.
- Additional compensation may include participation in performance-linked incentive programs.
- TIAA offers accessibility support and equal employment opportunity.
About Teachers Insurance and Annuity Association of America (TIAA)
TIAA is a privately held, not-for-profit financial services organization providing retirement plans, annuities, IRAs, mutual funds, life insurance, 529 plans, and brokerage services to employees and institutions in education, healthcare, and the nonprofit sector. Founded in 1918 and headquartered in New York, it also offers investment management through its Nuveen subsidiary. Its revenue comes from fees on asset management, insurance, and brokerage services.