Cryptographic Agility & Post-Quantum (PQC) Engineer

About the role

State Street is seeking a Cryptographic Agility & Post-Quantum (PQC) Engineer to help shape and deliver the firm's enterprise cryptographic modernization strategy. This role is ideal for a cybersecurity professional with a strong foundation in cryptography, encryption technologies, and security engineering who is passionate about preparing the organization for emerging cryptographic threats, including the impact of quantum computing.

Responsibilities

• Mature the enterprise Cryptographic Agility program, enabling the organization to respond effectively to evolving cryptographic risks and industry standards.
• Develop and maintain an inventory of cryptographic assets, dependencies, algorithms, protocols, certificates, keys, and related technologies across applications, platforms, and infrastructure.
• Identify systems utilizing vulnerable, deprecated, or legacy cryptographic algorithms and define remediation and migration strategies.
• Evaluate emerging post-quantum cryptography (PQC) standards and technologies, with a focus on NIST-approved cryptographic algorithms and industry best practices.
• Define approved cryptographic migration paths, transition frameworks, and implementation guidance for application and platform teams.
• Pilot and validate PQC-enabled technologies, services, and solutions to support future enterprise adoption.
• Develop standards, procedures, and technical guidance supporting cryptographic agility and quantum readiness initiatives.
• Monitor changes in the cryptographic landscape, including advancements in quantum computing, regulatory expectations, and industry standards.
• Produce metrics, dashboards, and executive reporting to track cryptographic risk, migration progress, and PQC readiness across the enterprise.
• Contribute to strategic security initiatives focused on strengthening the organization's long-term cryptographic resilience.

Qualifications

• Understanding of modern cryptographic concepts, encryption technologies, PKI, certificate management, and key management systems.
• Experience assessing security risks and translating technical findings into actionable remediation plans.
• Ability to collaborate effectively across diverse technology and business teams to drive enterprise-wide initiatives.
• Strong analytical and problem-solving skills with a structured approach to complex technical challenges.
• Curiosity and a desire to stay current with advancements in cybersecurity, cryptography, and quantum computing.
• Excellent written and verbal communication skills, including the ability to present technical concepts to both technical and non-technical audiences.
• A proactive mindset focused on continuous improvement, operational excellence, and risk reduction.
• Experience working within highly regulated financial services or other complex enterprise environments is a plus.