Lead Security Encryption Engineer

About the role

This role is in the office three days a week and a hybrid position. There is no Visa Sponsorship or Visa Transfers for this role.

Responsibilities

• Design, build, and scale critical encryption and key management solutions that protect sensitive data.
• Work across Linux, Windows, and automation frameworks to harden systems, optimize performance, and drive secure architecture forward.
• Partner with engineering and operations teams to deliver resilient, scalable solutions.
• Mentor and develop team members by providing technical guidance, sharing best practices, and fostering a culture of continuous learning and security excellence.

Requirements

• 5+ years of Information Security Engineering experience, or equivalent through work experience, training, military experience, or education.
• 5+ years of scripting/automation experience with tools like Bash, PowerShell, Python, Ansible, VBScript, or JavaScript.
• 5+ years of Unix/Linux/Windows Systems Administration experience with troubleshooting, OS hardening, and tuning.
• 5+ years of experience with encryption or tokenization technologies.
• 3+ years of experience with hardware security modules or security appliance devices.
• Advanced knowledge of cryptographic protocols & algorithms.
• Knowledge and understanding of cryptographic technologies and key management.
• Experience with Thales CipherTrust Key Manager and CipherTrust Transparent Encryption (CTE).
• Understanding of format preserving encryption (FPE), tokenization, and TDE (transparent data encryption).
• Experience with infrastructure upgrades, security patches, and version upgrades for systems, appliances, and HSMs.
• Experience with Agile Scrum or Kanban methodologies.
• Experience with application support in Linux and Windows server environments.
• Proven experience with change and incident management practices in medium to large enterprise environments.

Qualifications

• Advanced critical thinking, problem solving, and technical troubleshooting abilities.
• Security certifications such as CISSP, GIAC, or equivalent.
• Cloud certifications such as AZ-900, MS-900, or equivalent/higher.
• Experience with and the ability to thrive in a complex and fast-paced technology and/or information security organization, within a large enterprise environment.
• Experience performing technical product assessments, including development of implementation plans, in a large enterprise.
• Experience mentoring/guiding less experienced staff.
• Strong analytical skills with high attention to detail and accuracy.

Skills

• Experience with Puppet/Chef/Ansible or similar automation tools.
• Knowledge and understanding of banking or the financial services industry.
• Ability to coordinate completion of multiple tasks and meet aggressive time frames.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Pay

$119,000.00 - $224,000.00

Schedule

This role is in the office three days a week and a hybrid position.