Lead Cryptographic Software Engineer/ Enterprise Architect

Serves as a hands-on enterprise architect and principal software engineer for the organization’s most complex cryptographic, secrets-management, and platform-security initiatives.

This is a builder’s role, not an advisory one - the incumbent designs and personally implements reference architectures, writes production-grade code, and proves out patterns in running systems before asking other teams to adopt them.

Combines deep software engineering craft across multiple languages and technical domains with real enterprise-architecture accountability and applied cryptography experience, delivering secure, scalable, highly available solutions that set the technical direction for the division., Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Architects and personally builds end-to-end software and platform solutions for complex, high-impact cryptographic and security initiatives - producing working reference implementations, not slideware, that inform new products and platforms across the division.
• Owns the enterprise-architecture vision and its execution: translates strategic goals set by executives and senior leadership into concrete technical plans, then validates those plans by writing code, standing up prototypes, and operating them in real environments.
• Designs, implements, and integrates cryptographic and secrets-management capabilities - key management, encryption/decryption services, PKI, certificate lifecycle, HSM integration, token/credential issuance, and non-human-secrets controls - into production systems.
• Establishes advanced software engineering and secure-by-design standards, guardrails, and governance patterns, and demonstrates them through his/her own delivered work, enabling multiple teams to improve quality, reliability, and delivery outcomes.
• Resolves the hardest technical problems in the domain - the recurring, ambiguous, cross-system issues no one else has cracked - by designing innovative, reusable architectures and measurable performance, reliability, and scalability improvements.
• Goes arbitrarily deep in any technical domain required by the problem (distributed systems, APIs, data, infrastructure-as-code, container orchestration, applied cryptography), rapidly acquiring and applying expertise rather than deferring to specialists.
• Partners with senior technology leadership, product, architecture, and risk teams to shape domain strategy and roadmaps, contributing solution patterns backed by deep technical insight and firsthand implementation experience.
• Provides cross-team technical leadership, coaching, and mentoring through code reviews, design sessions, pairing, and knowledge sharing - raising the technical bar by example.
• Evaluates emerging technologies, cryptographic techniques, and research relevant to the domain, building prototypes that provide measurable input into new products, features, or capabilities.
• Leads large, complex, strategically important initiatives as an individual contributor, coordinating technical work across multiple teams while working independently with substantial autonomy and balancing innovation against risk.

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s degree in Computer Science, Software Engineering, or related field.
• Minimum of 10 years of professional experience in software development.
• Deep knowledge of multiple programming languages, software architecture, and design principles.
• Deep understanding of software development lifecycle, testing, deployment, and security practices., * Minimum of 10 years of professional software development experience, with a demonstrable, ongoing record of hands-on coding (not solely design or oversight).
• Deep expertise across multiple programming languages, software architecture, and design principles, with the proven ability to master new technical domains quickly.
• Demonstrated enterprise-architecture experience where the candidate both defined and implemented the architecture - reference implementations, working prototypes, or production systems he/she personally built.
• Applied experience with cryptography and/or secrets management (e.g., encryption services, key/certificate lifecycle, PKI, HSMs, or platforms such as HashiCorp Vault).
• Deep understanding of the full software development lifecycle, testing, deployment, and security practices.
• Deep expertise in cloud-native architectures, microservices, container orchestration, and DevOps/CI-CD.
• Hands-on experience with applied cryptography at scale - key management systems, HSM integration (e.g., Thales), certificate automation, or non-human/machine-identity secrets.
• Security certifications (e.g., CISSP, CISM, GIAC) and/or software certifications (e.g., CSDP) - valued as evidence of depth, not as a substitute for demonstrated building ability.
• Familiarity with regulatory and control frameworks relevant to financial services (e.g., SOX, GLBA, PCI).