Executive PKI & Cryptography Platform Leader

BNY

Lake Mary, FL

About the job

Job Description

Cryptography Platform and Servies Technologist Lead

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what is all about. Join us and be part of something extraordinary.

We’re seeking a future team member for the role of Cryptography Platform and Servies Technologist Lead

To join our Cybersecurity Organization team. This role is in Lake Mary, Florida

In this role, you’ll make an impact in the following ways:

• Lead BNY PKI solutions across BNY Enterprise

• Design, implement, and support Cryptography Certificate Management solution across BNY Enterprise.

• Design, implement, and support Cryptography Asset Management solution across BNY Enterprise.

• Ability to respond to requests from LOB, Internal Audit, and Federal Regulators on BNY PKI ecosystem

• Train enterprise on PKI platforms, Certificate Management platforms, HSMs, and Key Management systems.

• Collaborate with compliance teams to align solutions with regulatory frameworks such as GDPR, DORA, NIST, and ISO 27001.

To be successful in this role, we’re seeking the following:

Experience and Education

• Master’s in information security or related fields.

• 10-15+ years of work experience in cyber security, network security, architecture design, and PKI solutions.

• Proficiency in:

• PKI (Entrust, Digi Cert/Symantec, Microsoft, Venafi, Keyfactor), HSM, RSA SecurID, PGP, cryptographic algorithms (e.g., RSA, AES), protocols (e.g., SSL/TLS, IPSec, SSH, Kerberos)

• Firewalls (Cisco, Juniper, Palo Alto Networks), VPN, IPSec, Identity and Access Management (IAM), SSO, multi-factor authentication (MFA), privileged access management (PAM), RADIUS, OAuth

• Security policies, disaster recovery, change management, risk assessment, threat modeling

• Cloud Services (AWS, Azure), Cisco routers and switches, IoT

• Intune, Mobile Iron, Air Watch, Service Now, JIRA, Confluence, Rally, HP Service Manager

• ISO/IEC 27001, PCI DSS, X.509, IEEE 802.1X, FISMA, NIST, MITRE, COBIT, ITIL

• Ability to train enterprise on PKI platforms, Certificate Management platforms, HSMs, and Key Management systems.

• Knowledge of Cryptographic algorithms and cryptographic principles, including digital signatures and blockchain systems.

• Familiarity with compliance frameworks such as GDPR, DORA, NIST, and ISO 27001.

• Experience with PKI platforms, Certificate Management platforms, HSMs, and Key Management systems.

• Experience in global Financial Services security ecosystem is preferred.

Desired Skills

• Practical experience with PKI, HSM, RSA SecurID, PGP,cryptographic algorithms (e.g., RSA, AES), protocols (e.g., SSL/TLS, IPSec, SSH, Kerberos).

• Expertise in integrating Certification Authorities into Intune or related technologies.

• Hands-on experience with PKI, Firewalls, Security Policies, Cloud Services, Intune, and ISO 27001.

• Strong communication skills for presenting PKI concepts to diverse technical and non-technical audiences.

•

Certifications:

Certified Information Systems Security Professional CISSP, Cisco Certified Entry Network Technician CCENT, Certified Technical Trainer CTT etc.

•…