Cryptographic Agility & Post-Quantum (PQC) Engineer

As a Cryptographic Agility & Post-Quantum (PQC) Engineer at State Street, you will help shape and deliver the firm's enterprise cryptographic modernization strategy. You'll partner across cybersecurity, architecture, engineering, infrastructure, and application teams to establish and operationalize a formal cryptographic agility capability, ensuring the organization can efficiently identify cryptographic dependencies, evaluate emerging standards, and execute controlled transitions to new cryptographic algorithms while maintaining security, compliance, and business continuity.

What you'll do

• Mature the enterprise Cryptographic Agility program, enabling the organization to respond effectively to evolving cryptographic risks and industry standards
• Develop and maintain an inventory of cryptographic assets, dependencies, algorithms, protocols, certificates, keys, and related technologies across applications, platforms, and infrastructure
• Identify systems utilizing vulnerable, deprecated, or legacy cryptographic algorithms and define remediation and migration strategies
• Evaluate emerging post-quantum cryptography (PQC) standards and technologies, with a focus on NIST-approved cryptographic algorithms and industry best practices
• Define approved cryptographic migration paths, transition frameworks, and implementation guidance for application and platform teams
• Partner with enterprise architecture, platform engineering, application development, PKI, and infrastructure teams to assess cryptographic readiness and capabilities
• Pilot and validate PQC-enabled technologies, services, and solutions to support future enterprise adoption
• Develop standards, procedures, and technical guidance supporting cryptographic agility and quantum readiness initiatives
• Monitor changes in the cryptographic landscape, including advancements in quantum computing, regulatory expectations, and industry standards
• Produce metrics, dashboards, and executive reporting to track cryptographic risk, migration progress, and PQC readiness across the enterprise
• Contribute to strategic security initiatives focused on strengthening the organization's long-term cryptographic resilience

What you bring

• A Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, Mathematics, or a related discipline, or equivalent work experience
• 5+ years of experience in cybersecurity, security engineering, encryption, PKI, key management, infrastructure security, or a related field
• Understanding of modern cryptographic concepts, encryption technologies, PKI, certificate management, and key management systems
• Working knowledge of cryptographic algorithms, protocols, and security controls used in enterprise environments
• Experience assessing security risks and translating technical findings into actionable remediation plans
• Experience with enterprise operating systems, cloud platforms, and distributed application architectures
• Ability to collaborate effectively across diverse technology and business teams to drive enterprise-wide initiatives
• Strong analytical and problem-solving skills with a structured approach to complex technical challenges
• Excellent written and verbal communication skills, including the ability to present technical concepts to both technical and non-technical audiences
• A proactive mindset focused on continuous improvement, operational excellence, and risk reduction

Nice to have

• Familiarity with cloud platforms such as AWS, Microsoft Azure, OCI, or Google Cloud Platform
• Exposure to post-quantum cryptography concepts, cryptographic inventory/discovery tools, or cryptographic risk assessments
• Experience supporting security compliance frameworks, cybersecurity standards, and audit activities
• Experience developing scripts or automation solutions using languages such as Python, PowerShell, Bash, Java, C#, or Go
• Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Jenkins, Harness, or similar CI/CD platforms
• Industry certifications such as CISSP, Certified Encryption Specialist (ECES), or similar certifications
• Experience working within highly regulated financial services or other complex enterprise environments
• Curiosity and a desire to stay current with advancements in cybersecurity, cryptography, and quantum computing

What we offer

• Salary range of $120,000 to $202,500 annually (applies to the primary location; may differ if you work outside the primary location)
• Retirement savings plan (401K) with company match
• Insurance coverage including basic life, medical, dental, vision, long-term disability, and optional additional coverages
• Paid time off including vacation, sick leave, short-term disability, and family care responsibilities
• Access to the Employee Assistance Program
• Incentive compensation including eligibility for annual performance-based awards
• Eligibility for certain tax-advantaged savings plans

About State Street

State Street is a global firm that institutional investors rely on to help them manage risk, respond to challenges, and drive performance and profitability. The company fosters an inclusive environment where employees benefit from development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks.