Cryptography Platform and Services Technologist Lead

We’re seeking a future team member for the role of Cryptography Platform and Servies Technologist Lead

\n

to join our Cybersecurity Organization team. This role is located in NYC/NJ, Lake Mary, Florida, or Pittsburgh PA

\n

In this role, you’ll make an impact in the following ways:

\n

\n
• Lead BNY Key Management solutions across BNY Enterprise
\n
• Design, implement, and support Cryptography Key Management solution across BNY Enterprise.
\n
• Design, implement, and support Cryptography Asset Management solution across BNY Enterprise.
\n
• Ability to respond to requests from LOB, Internal Audit, and Federal Regulators on BNY Key Management ecosystem
\n
• Train enterprise on PKI platforms, HSMs, and Key Management systems.
\n
• Collaborate with compliance teams to align solutions with regulatory frameworks such as GDPR, DORA, NIST, and ISO 27001.
\n

\n

\n

To be successful in this role, we’re seeking the following:

\n

\n

\n
• Master’s in information security or related fields.
\n
• 5-10+ years of work experience in cyber security, architecture design, Key Management and PKI solutions.
\n
• Key Management (HSM, Thales Products (Ciphertruct, DPOD), Oracle Key Vault)
\n
• HSM, RSASecurID, cryptographic algorithms (e.g., RSA, AES), protocols (e.g., SSL/TLS, IPSec, SSH, Kerberos)
\n
• Security policies, disaster recovery, change management, risk assessment, threat modeling
\n
• Security within Cloud Services (AWS, Azure), Cisco routers and switches, IoT
\n
• ISO/IEC 27001, PCI DSS, X.509, IEEE 802.1X, FISMA, NIST, MITRE, COBIT, ITIL
\n
• Ability to train enterprise on HSMs and Key Management systems.
\n
• Knowledge of Cryptographic algorithms and cryptographic principles, including digital signatures and blockchain systems.
\n
• Familiarity with compliance frameworks such as GDPR, DORA, NIST, and ISO 27001.
\n
• Experience with Key Management systems, HSMs, and PKI Platforms.
\n
• Experience in global Financial Services security ecosystem is preferred.
\n
• Practical experience with PKI, HSM, RSA SecurID, PGP,cryptographic algorithms (e.g., RSA, AES), protocols (e.g., SSL/TLS, IPSec, SSH, Kerberos).
\n
• Practical experience in Thales HSM, Thales SAAS Products, Thales Ciphertrust, Oracle Key Vault
\n
• Hands-on experience with Thale’s products and Oracle key management products.
\n
• Strong communication skills for presenting Key Management concepts to diverse technical and non-technical audiences.
\n
• Certifications: Certified Information Systems Security Professional CISSP, Cisco Certified Entry Network Technician CCENT, Certified Technical Trainer CTT etc.
\n
• Experience with Cybersecurity policies, cryptographic algorithms, Public Key Infrastructure (PKI), HSM, and key management systems.
\n

\n

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.