Cryptographic Agility & Post-Quantum (PQC) Engineer

About the role

State Street is seeking a Cryptographic Agility & Post-Quantum (PQC) Engineer to help shape and deliver the firm's enterprise cryptographic modernization strategy. This role is ideal for a cybersecurity professional with a strong foundation in cryptography, encryption technologies, and security engineering who is passionate about preparing the organization for emerging cryptographic threats, including the impact of quantum computing.

Responsibilities

• Mature the enterprise Cryptographic Agility program, enabling the organization to respond effectively to evolving cryptographic risks and industry standards.
• Develop and maintain an inventory of cryptographic assets, dependencies, algorithms, protocols, certificates, keys, and related technologies across applications, platforms, and infrastructure.
• Identify systems utilizing vulnerable, deprecated, or legacy cryptographic algorithms and define remediation and migration strategies.
• Evaluate emerging post-quantum cryptography (PQC) standards and technologies, with a focus on NIST-approved cryptographic algorithms and industry best practices.
• Define approved cryptographic migration paths, transition frameworks, and implementation guidance for application and platform teams.
• Pilot and validate PQC-enabled technologies, services, and solutions to support future enterprise adoption.
• Develop standards, procedures, and technical guidance supporting cryptographic agility and quantum readiness initiatives.
• Monitor changes in the cryptographic landscape, including advancements in quantum computing, regulatory expectations, and industry standards.
• Produce metrics, dashboards, and executive reporting to track cryptographic risk, migration progress, and PQC readiness across the enterprise.
• Contribute to strategic security initiatives focused on strengthening the organization's long-term cryptographic resilience.

Qualifications

• Understanding of modern cryptographic concepts, encryption technologies, PKI, certificate management, and key management systems.
• Experience assessing security risks and translating technical findings into actionable remediation plans.
• Ability to collaborate effectively across diverse technology and business teams to drive enterprise-wide initiatives.
• Strong analytical and problem-solving skills with a structured approach to complex technical challenges.
• Curiosity and a desire to stay current with advancements in cybersecurity, cryptography, and quantum computing.
• Excellent written and verbal communication skills, including the ability to present technical concepts to both technical and non-technical audiences.
• A proactive mindset focused on continuous improvement, operational excellence, and risk reduction.
• Experience working within highly regulated financial services or other complex enterprise environments is a plus.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, Mathematics, or a related discipline, or equivalent work experience.
• 5+ years of experience in cybersecurity, security engineering, encryption, PKI, key management, infrastructure security, or a related field.
• Working knowledge of cryptographic algorithms, protocols, and security controls used in enterprise environments.
• Familiarity with cloud platforms such as AWS, Microsoft Azure, OCI, or Google Cloud Platform.
• Exposure to post-quantum cryptography concepts, cryptographic inventory/discovery tools, or cryptographic risk assessments.
• Experience supporting security compliance frameworks, cybersecurity standards, and audit activities.
• Experience developing scripts or automation solutions using languages such as Python, PowerShell, Bash, Java, C#, or Go.
• Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Jenkins, Harness, or similar CI/CD platforms.
• Industry certifications such as CISSP, Certified Encryption Specialist (ECES), or similar certifications are desirable.