GCS PKI Engineer, AVP

Make Your Mark. Advance your career at State Street.

We are excited to see that you are reviewing career opportunities available at State Street. Follow the tips below when applying. If this opportunity is not right for you – perhaps you may want to refer a friend?

Are you advancing your own career?

After clicking “Apply” you will be able to update your Education and Job History. Use it to highlight courses, certifications, achievements or projects you have participated in at State Street. To make updates, go to the Career section of your Profile and edit it manually or by using the “Upload My Experience” option. Remember to review all new entries in your profile and make sure resume information was parsed correctly.

Before applying, please click here to read State Street’s Internal Mobility Policy. (For China, click here )

Are you referring a friend?

Please use the “Refer” button on the right. If you have any questions about the process please visit the corporate intranet and type in Refer a Friend into the search bar.

Job Description

This is a technical position to evolve and consolidate PKI infrastructure throughout the enterprise.

The PKI Engineer candidate will assist in the development of PKI solutions and day to day operations to meet security and business requirements.  The PKI engineer candidate must possess an understanding of the concepts of cryptography such as Symmetric/asymmetric cryptography, Secure hash functions, Digital signatures and SSL/TLS. The candidate should possess strong understanding of security best practices.

Responsibilities will include:

• Support and enhance company wide PKI services using current Certification Authorities (CAs) and Registration Authorities
• Monitor for and Ensure timely renewal of expiring certificates
• Provide consulting and guidance to application teams around cryptographic technologies
• Test, implement changes in the PKI Infrastructure
• Interface with vendors that provide security/encryption services to the company

• Assist in the development and maintenance of system orchestration to automate day to day processes
• Assist in the development and maintenance of ad-hoc and automated data reporting as needed using vendor tooling or custom automation as appropriate
• Creating and maintaining documentation for technical and administrative functions
• Assist in the development and maintenance of automation approaches to solve PKI lifecycle challenges
• Assist in the Integration of applications, infrastructure and third-party products into internal PKI services

Skills/Knowledge Desired:

• Certificate Authority Administration
• Certificate Enrollment Web Service & Policy Web Service
• Active Directory Certificate Services (ADCS) monitoring.
• Data-in-motion Encryption
• Data-at-rest Encryption
• Strong knowledge in Public Key Infrastructure (PKI) machine identity technologies such as SSH, SSL, TLS.
• Familiarity with Disaster Recovery process and Business Continuity procedures.
• Proficiency with a scripting language such as Java, Python or Powershell
• Experienced in database configuration and SQL
• Experience with workflow and API development

Experience Desired

• 3-5 years of experience working with PKI architecture
• 3-5 years of System Administration of Windows, Unix/ Linux
• 3-5 years of experience in infrastructure (security/systems/network) engineering and/or    development
• 3-5 years in technology and/or project management leadership positions
• Experience developing executive-level reporting and communications
• Experience establishing and defining the scope of new teams or functions
• Experience working in large complex environments (financial services a plus)

Additional Locations