Cryptographic Security Engineer

Description Cryptographic EngineerRole SummaryThe Cryptographic Engineer is a hands-on technical role responsible for supporting, implementing, and improving the organization’s cryptographic platforms with a strong emphasis on operational stability, automation, and risk reduction.This role operates at the intersection of Cryptography, PKI, Certificate Lifecycle Management, Cloud Key Management, and Security Automation. The engineer will help maintain and enhance cryptographic services while contributing to strategic initiatives such as certificate lifecycle automation, cloud encryption adoption, and post-quantum cryptography readiness.ResponsibilitiesCryptographic Engineering & OperationsSupport and enhance enterprise cryptographic platforms including:Public Key Infrastructure (PKI)TLS and certificate lifecycle managementCloud key management services (AWS KMS, Azure Key Vault)Hardware Security Modules (HSMs)Apply cryptographic best practices related to:Cryptographic algorithms and protocolsKey management and protectionCertificate trust models and lifecycle controlsPerform and support day-to-day cryptographic operations including:Certificate issuance, renewal, revocation, and validationKey rotation and lifecycle management activitiesMonitoring and responding to certificate and encryption-related incidentsTroubleshooting cryptographic service disruptions and operational issuesHands-on experience with one or more of the following:Venafi (TLS Protect / Trust Protection Platform) or equivalent certificate management solutionsThales CipherTrust, Luna HSM, or similar key management technologiesServiceNow workflows, CMDB, or operational processesExperience with scripting or automation using:PythonPowerShellBash or similar languagesFamiliarity with REST APIs and system integrations.Strong troubleshooting, analytical, and problem-solving skills.Assist with API-based integrations to improve certificate and key management processes.Post-Quantum Cryptography & Emerging TechnologiesParticipate in the organization’s post-quantum cryptography (PQC) readiness initiatives by:Assisting with cryptographic inventory effortsIdentifying quantum-vulnerable algorithms and systemsSupporting crypto-agility assessmentsEvaluating emerging cryptographic technologies and standardsStay current with industry developments including NIST guidance, PQC standards, and evolving cryptographic best practices.Required Qualifications3+ years of experience in Information Security, PKI, Cryptography, Infrastructure Security, or Security Engineering.Experience implementing, supporting, or administering enterprise certificate management solutions.Working knowledge of:TLS and X.509 certificatesPKI concepts and certificate lifecycle managementCryptographic key managementHardware Security Modules (HSMs)Hours & Work ScheduleHours per Week: 40Work Schedule: Monday through Friday, 8:30am - 5:00pm with on call rotation flexibility Pay TransparencyThe salary range for this position is $80,000 - 110,000 per year, plus an opportunity to earn additional incentive earnings (if applicable). Actual pay is based on various factors including, but not limited to, the budget, work location, and relevant skills and experience. We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit Citizens Benefits Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance. Equal Employment OpportunityCitizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and

management and protectionCertificate trust models and lifecycle controlsPerform and support day-to-day cryptographic operations including:Certificate issuance, renewal, revocation, and validationKey rotation and lifecycle management activitiesMonitoring and responding to certificate and encryption-related incidentsTroubleshooting cryptographic service disruptions and operational issuesHands-on experience with one or more of the following:Venafi (TLS Protect / Trust Protection Platform) or equivalent certificate management solutionsThales CipherTrust, Luna HSM, or similar key management technologiesServiceNow workflows, CMDB, or operational processesExperience with scripting or automation using:PythonPowerShellBash or similar languagesFamiliarity with REST APIs and system integrations.Strong troubleshooting, analytical, and problem-solving skills.Assist with API-based integrations to improve certificate and key management processes.Post-Quantum Cryptography & Emerging TechnologiesParticipate in the organization’s post-quantum cryptography (PQC) readiness initiatives by:Assisting with cryptographic inventory effortsIdentifying quantum-vulnerable algorithms and systemsSupporting crypto-agility assessmentsEvaluating emerging cryptographic technologies and standardsStay current with industry developments including NIST guidance, PQC standards, and evolving cryptographic best practices.Required Qualifications3+ years of experience in Information Security, PKI, Cryptography, Infrastructure Security, or Security Engineering.Experience implementing, supporting, or administering enterprise certificate management solutions.Working knowledge of:TLS and X.509 certificatesPKI concepts and certificate lifecycle managementCryptographic key managementHardware Security Modules (HSMs)Hours & Work ScheduleHours per Week: 40Work Schedule: Monday through Friday, 8:30am - 5:00pm with on call rotation flexibility Pay TransparencyThe salary range for this position is $80,000 - 110,000 per year, plus

an opportunity to earn additional incentive earnings (if applicable). Actual pay is based on various factors including, but not limited to, the budget, work location, and relevant skills and experience. We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit Citizens Benefits Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance. Equal Employment OpportunityCitizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and