M

Morgan Stanley

Manages investments and advises on financing

Lead Cryptography Engineer - Public Key Infrastructure

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeNew York, NY, USAIn-person

About the Job

Requirements

  • A bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
  • At least 10 years of hands-on experience in cybersecurity engineering or operations, with exposure to cryptographic services such as Public Key Infrastructure, hardware security modules, and certificate management.
  • Strong understanding of cryptographic principles, protocols, and standards, including Transport Layer Security, X.509, key exchange, and encryption algorithms.
  • Proven experience managing Public Key Infrastructure environments and certificate lifecycle tools in enterprise or cloud environments.
  • Hands-on experience with hardware security module technologies and key management practices, including secure key generation, storage, rotation, and backup.
  • Familiarity with automation and scripting, such as Python or PowerShell, to streamline certificate and key management processes.
  • Knowledge of Post-Quantum Cryptography and crypto-agility concepts.
  • Prior experience as a lead or driver of change in a security function.
  • Ability to manage multiple functions and initiatives and apply prior expertise to architectural decisions.

Responsibilities

  • Communicate regularly with product leads across the organization and discuss opportunities to improve existing and future technology solutions.
  • Design, implement, and maintain enterprise cryptographic infrastructure, including Public Key Infrastructure, hardware security modules, and certificate management platforms.
  • Manage the full certificate lifecycle, including issuance, renewal, revocation, and deployment, to ensure security, availability, and compliance.
  • Engineer and support secure key management solutions using hardware security modules, including key generation, storage, rotation, and backup.
  • Monitor and operate cryptographic services in a 24/7 environment with on-call rotations, ensuring high availability, incident response, and performance optimization.
  • Automate certificate and key management processes to reduce manual effort and minimize operational risk.
  • Collaborate with application, infrastructure, and security teams to integrate cryptographic controls into enterprise systems and cloud environments.
  • Support the evaluation, design, and adoption of Post-Quantum Cryptography capabilities, including Post-Quantum Cryptography-enabled Public Key Infrastructure environments, crypto-agility strategies, and transition planning.
  • Mentor and guide junior colleagues.

Desired Qualifications

  • Relevant certifications such as CISSP, CISM, or vendor-specific Public Key Infrastructure or hardware security module certifications.

About the Company

Morgan Stanley

Manages investments and advises on financing

Morgan Stanley advises companies and governments on financing and manages investments for institutions, individuals, and families. Its business combines investment banking and securities trading with wealth management and an asset-management division that invests across public and private markets. Bankers arrange stock and bond sales and advise on mergers, while advisors build client portfolios and fund managers invest money under agreed strategies. The firm earns advisory and management fees, trading revenue, commissions, and interest from lending and deposits. Morgan Stanley was founded as a partnership in 1935 and is headquartered in New York City.

Company size
10,001+
Company stage
IPO
Headquarters
New York City, New York
Founded
1935

Recently Posted Jobs

Explore more opportunities at Morgan Stanley

See more jobs