Cryptographic Engineer

About the role

This position provides an opportunity to transition from other private, public, government, or military experience to a 3M career. Collaborate with innovative 3Mers around the world in a place where curious, creative professionals thrive.

Responsibilities

• Troubleshoot operational issues for encryption key and certificate-related tools/services.
• Respond to client requests for encryption keys and digital certificates with on-call support.
• Manage AWS-hosted platforms used to provide centralized storage, issuance, and revocation of encryption keys and digital certificates, including installing, patching, upgrades, vulnerability management, backups, new builds, and data migrations.
• Manage the Enterprise Secure Key Lifecycle (ESKM) platform from Utimaco.
• Manage the CipherTrust Manager (CTM) platform from Thales.
• Manage the Active Directory Certificate Services (ADCS) internal Public Key Infrastructure (PKI) platform, including certificate authorities and network device enrollment.
• Manage the Venafi platform for certificate management.
• Partner with cloud platform engineering teams in support of Amazon Certificate Manager (ACM), AWS Key Management Service (KMS), and Azure Key Vault.
• Collaborate with IT and security teams to ensure compliance with security policies and best practices.

Requirements

• High School Diploma (verified and completed prior to start) and 8 years of experience in Information Technology, Computer Science, Engineering, or Information Security in a private, public, government, or military environment.
• OR Bachelor’s degree or higher (verified and completed prior to start) and six (6) years of experience in Information Technology, Computer Science, Engineering, or Information Security in a private, public, government, or military environment.
• Must be legally authorized to work in the country of employment without sponsorship for employment visa status (e.g., H1B status).

Skills

• Proven experience with AWS as an engineer or architect.
• Proven experience managing encryption platforms, such as Enterprise Secure Key Lifecycle (ESKM) and CipherTrust Manager (CTM).
• Proven experience managing Public Key Infrastructure (PKI) with hands-on experience administering Microsoft Active Directory Certificate Services (ADCS).
• Proven experience with cloud-based services such as Amazon Certificate Manager (ACM), AWS Key Management Service (KMS), and Azure Key Vault.
• Proven experience with certificate management, such as Venafi.
• Strong understanding of cryptographic principles and digital certificate management.
• Excellent problem-solving skills and attention to detail.
• Strong communication and collaboration skills.
• Relevant certifications such as CISSP, CISM, or similar.
• Experience with scripting languages such as PowerShell or Python.
• Familiarity with cloud security best practices.

Schedule

• On-site in Maplewood, MN, or Austin, TX office at least 4 days per week.
• Travel may include up to 15% domestic/international.

Pay

The expected compensation range for this position is $109,202 - $133,469, which includes base pay plus variable incentive pay, if eligible. The specific compensation offered may vary based on factors including relevant knowledge, training, skills, work location, and experience.

Benefits

• Medical, Dental, and Vision coverage.
• Health Savings Accounts, Health Care, and Dependent Care Flexible Spending Accounts.
• Disability Benefits and Life Insurance.
• Voluntary Benefits.
• Paid Absences and Retirement Benefits.

Additional information is available at 3M Benefits Overview.