> Markdown version of [/jobs/ext/2074226-head-of-cryptography-md](https://www.wearedevelopers.com/jobs/ext/2074226-head-of-cryptography-md). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Head of Cryptography, MD

- **Company:** State Street
- **Location:** Quincy, MA, United States
- **Experience:** Expert
- **Salary:** $120,000.0 - $217,500.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Architectural Patterns, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Digital Signature, Disaster Recovery, Distributed Systems, Hardware Security Module, Identity and Access Management, Key Management, PCI Data Security Standards, Public Key Infrastructure, Software Product Management, Quantum Computing, Software Engineering, Tokenization, SSL Certificate Management, Cloud Platform System, Multi-Cloud, Containerization, Kubernetes, Information Technology, Data Management, Cloud Migration, Serverless Computing
- **Published:** August 15, 2026
- **Apply:** https://www.careerjet.com/job/us767e25d5ad100e1c9658ed2b6bbd9bc9/eaa

## About the Role

15+ years of experience in cybersecurity, cryptography, security engineering, or infrastructure security leadership roles.
Demonstrated success leading enterprise cryptography or key management programs within large, highly regulated organizations.
Deep expertise in:
Applied cryptography
PKI
Key management
HSM technologies
Secrets management
Certificate lifecycle management
Cloud security architectures
Experience designing cryptographic controls across cloud-native, hybrid, and distributed environments.
Strong understanding of post-quantum cryptography strategies and emerging cryptographic standards.
Proven track record leading large-scale modernization and transformation initiatives.
Experience engaging with executive leadership, regulators, auditors, and major clients.
Additional requirements
Recognized industry expert in cryptography and cryptographic security services.
Strong technical depth combined with executive-level communication skills.
Strategic thinker capable of balancing innovation, resilience, and operational effectiveness.
Passion for automation, simplification, and engineering excellence.
Strong understanding of cloud, identity, infrastructure, and modern application architectures.
Ability to influence enterprise-wide technology decisions.
Risk-focused mindset with strong governance and control discipline.
Trusted leader with a track record of building and scaling high-performing technical organizations.
Education & Preferred Qualifications
Bachelor's degree in Computer Science, Engineering, Information Security, Mathematics, or related discipline.
Advanced degree preferred.
Relevant certifications such as CISSP, CCSP, CISM, GCFA, or specialized cryptography/security certifications are highly desirable.

## Description

The Managing Director, Head of Cryptography is a senior leadership role responsible for defining, governing, and advancing the firm's enterprise cryptography, key management, secrets management, and cryptographic modernization strategy.
This leader will be accountable for ensuring the confidentiality, integrity, authenticity, and resilience of the firm's critical systems, applications, data, and digital transactions through industry-leading cryptographic controls and services.
Why this role is important to us
The role requires a forward-thinking technical executive capable of driving enterprise-scale transformation across cloud, hybrid, and emerging technology environments. The successful candidate will lead the evolution of cryptographic capabilities to support modern architectures, AI-enabled platforms, cloud-native services, machine identities, and future threats, including quantum computing risks.
This executive will partner closely with Infrastructure, Cloud Engineering, Application Development, Data, Security Architecture, IAM, and Enterprise Architecture teams to ensure cryptography is embedded by design across the organization's technology ecosystem.
What you will be responsible for
Enterprise Cryptography Strategy
Define and execute the firm's comprehensive cryptography strategy, roadmap, and governance framework.
Establish enterprise standards and policies covering:
Encryption at rest
Encryption in transit
Key management
Secrets management
Certificate management
Digital signatures
Tokenization
Hardware Security Modules (HSMs)
Cryptographic agility
Ensure cryptographic capabilities support business growth, regulatory expectations, cloud transformation, and emerging technology adoption.
Develop executive-level metrics and reporting that provide visibility into cryptographic maturity, risk exposure, and modernization progress.
Cryptographic Modernization
Lead enterprise initiatives to modernize the firm's cryptographic infrastructure and services.
Drive programs focused on:
Cryptographic inventory and visibility
Legacy algorithm remediation
Deprecation of weak cryptographic standards
Secure migration strategies
Cryptographic agility
Automated cryptographic lifecycle management
Develop a roadmap that reduces operational complexity while improving security resilience across all environments.
Partner with engineering teams to ensure cryptographic controls remain scalable, performant, and developer-friendly.
Key Management & Secrets Management
Establish and operate enterprise-class key management services supporting the firm's most critical systems and data.
Lead strategy and execution across:
Enterprise Key Management Systems (KMS)
Hardware Security Modules (HSM)
Secrets vaults
Machine identity management
Certificate lifecycle management
Service-to-service authentication
Drive adoption of automated key lifecycle capabilities, including:
Automated provisioning
Automated rotation
Revocation
Expiration management
Recovery procedures
Reduce operational risk through consistent, centralized, and automated cryptographic controls.
Cloud & Platform Security Enablement
Partner with Cloud Engineering, Infrastructure, and Application teams to embed cryptographic controls into enterprise platforms.
Establish secure-by-default cryptographic services that support:
Multi-cloud environments
SaaS platforms
Containerized workloads
Kubernetes environments
Modern application architectures
Data platforms
AI and machine learning environments
Enable engineering teams through reusable services, APIs, automation, and paved-road security patterns.
Machine Identity & Certificate Security
Develop and modernize the firm's machine identity strategy.
Lead efforts to secure and manage:
Certificates
APIs
Service accounts
Workload identities
Non-human identities
Infrastructure identities
Improve visibility and governance across machine identity ecosystems while reducing risks associated with expired, misconfigured, or unmanaged credentials.
Drive automation to eliminate manual certificate and identity management processes wherever possible.
Post-Quantum Cryptography Readiness
Lead the firm's post-quantum cryptography strategy.
Develop capabilities to:
Inventory cryptographic dependencies
Assess quantum risk exposure
Prioritize remediation efforts
Establish migration roadmaps
Implement cryptographic agility standards
Partner with Enterprise Architecture and Technology leadership to ensure long-term resilience against emerging cryptographic threats.
Provide executive guidance on evolving industry standards and regulatory expectations related to quantum readiness.
Risk Management & Control Governance
Establish enterprise-wide processes for assessing cryptographic risks and control effectiveness.
Drive initiatives to:
Identify cryptographic gaps
Evaluate implementation quality
Assess key management maturity
Measure cryptographic coverage
Prioritize remediation by risk
Develop governance mechanisms that ensure adherence to enterprise cryptographic standards across all technology domains.
Regulatory & Audit Engagement
Ensure cryptographic controls align with regulatory, client, and industry expectations.
Support compliance with frameworks including:
FFIEC
NIST
ISO 27001
PCI DSS
NYDFS
GDPR
SEC requirements
Serve as the senior cryptography subject matter expert during regulatory examinations, internal audits, client assessments, and control reviews.
Provide clear and defensible narratives regarding cryptographic controls, key management practices, and risk mitigation strategies.
Executive Leadership & Stakeholder Engagement
Serve as a trusted advisor to the CISO, CIO, CTO, Chief Data Officer, and senior technology leadership.
Translate highly technical cryptographic concepts into practical business decisions and investment priorities.
Influence enterprise architecture, platform strategy, cloud adoption, and modernization efforts through cryptographic expertise.
Build strong partnerships across Security, Technology, Infrastructure, Data, Risk, and Compliance organizations.
Team Leadership & Development
Build and lead a world-class Cryptography organization responsible for:
Cryptography Engineering
Key Management Services
Secrets Management
PKI Operations
Machine Identity Security
Cryptographic Modernization
Post-Quantum Readiness
Develop technical talent and create a culture focused on engineering excellence, automation, innovation, and operational resilience.
Act as the firm's senior cryptographic authority and mentor for engineering and security leaders., Who we are looking for State Street is seeking an experienced and execution-oriented leader to serve as Managing Director, Head of AI Product Management & Portfolio Execution. …

 + 7 days ago, Who we are looking for We are seeking a strategic, client-focused, and transformational leader to serve as SVP, Head of Accounting & Fund Administration. This executive will be r…
 + 7 days ago


## Related Videos

- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal)
- [When Value Becomes Programmable: A Developer's Guide to Tokenization](https://www.wearedevelopers.com/videos/100276-when-value-becomes-programmable-a-developer-s-guide-to-tokenization)
- [Post-Quantum Cryptography: Preparing for Q-Day](https://www.wearedevelopers.com/videos/100179-post-quantum-cryptography-preparing-for-q-day)
- [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing)
- [Quantum Computing - How Does It Work, How Will it Affect Us and When?](https://www.wearedevelopers.com/videos/100293-quantum-computing-how-does-it-work-how-will-it-affect-us-and-when)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)