SSH & Machine Identity Engineer
State Street2 days ago
Base Salary
$120k - $203k/yr
Responsibilities
- Lead engineering and implementation of the enterprise SSH Certificate Authority capability.
- Define SSH certificate, SSH key lifecycle, trust, and access patterns across the organization.
- Drive SSH key discovery, ownership mapping, remediation, and lifecycle governance.
- Develop automation for SSH certificate issuance, rotation, revocation, and reporting.
- Partner with infrastructure, Linux, cloud, privileged access, and application teams to onboard SSH use cases.
- Align SSH capabilities with machine identity management, PKI, and cryptographic operations strategies.
- Support vault and secrets management integrations for SSH credentials and keys.
- Define operational runbooks, monitoring requirements, and escalation paths for SSH services.
- Support audit, risk, and regulatory inquiries related to SSH controls and machine identities.
- Contribute to the long-term vision for centralized cryptographic operations support.
Requirements
- At least 7 years of cybersecurity, infrastructure, Linux, identity, PKI, or privileged access engineering experience.
- Strong understanding of SSH, SSH keys, SSH certificates, Linux/Unix access patterns, and privileged access controls.
- Experience with certificate authorities, PKI concepts, machine identity management, and secrets management platforms.
- Experience automating identity, access, or infrastructure workflows using scripts, APIs, or orchestration tools.
- Strong knowledge of enterprise risk, audit evidence, operational controls, and security standards.
- Ability to influence multiple technology teams and drive adoption of new security capabilities.
- Clear communication skills for working with technical teams, leadership, audit, and risk stakeholders.
- Strong ownership mindset and a practical focus on risk reduction, operational simplification, automation, and measurable outcomes.
Benefits
- Annual base salary range of $120,000-$202,500, with the applicable range potentially varying by work location.
- Retirement savings plan with company match.
- Basic life, medical, dental, vision, long-term disability, and optional insurance coverage.
- Paid vacation, sick leave, short-term disability, and family care leave.
- Employee Assistance Program.
- Eligibility for annual performance-based incentive awards and certain tax-advantaged savings plans.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
About State Street
State Street is a global custodian bank and asset manager serving institutional investors with investment servicing, fund accounting, trading/FX, data, and index/active strategies. Its products include State Street Global Advisors’ funds and ETFs, the Charles River Investment Management Solution, and the front-to-back State Street Alpha platform. Founded in 1792 and headquartered in Boston, the company is publicly traded on the NYSE (ticker: STT) and operates across major markets worldwide.