Director - PKI Solution Engineering

Job Title

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

The impact you will have in this role:

Being a member of IT Cybersecurity Engineering and Operations at DTCC, your purpose is to provide best-in-class and versatile security services to the enterprise. As a Senior Solution Engineer within Cybersecurity Engineering, you will serve as the technical leader for DTCC's Public Key Infrastructure (PKI) services and cryptographic trust platforms. You will be responsible for advancing the architecture, strategy, and modernization of enterprise PKI capabilities while helping DTCC prepare for the next generation of cryptographic technologies.

This role will drive the evolution of DTCC's certificate management and trust services, including modernization of internal certificate authorities, automation of external PKI ecosystems, expansion of cloud-native PKI capabilities, adoption of crypto-agile architectures, and support for post-quantum cryptography (PQC). You will partner closely with engineering, operations, security, architecture, and application teams to establish scalable patterns and standards that strengthen DTCC's security posture while enabling innovation across the enterprise.

This role is an Individual Contributor role. You will serve as the senior technical authority for PKI architecture and strategy, working alongside engineering and operations teams to define the future of enterprise cryptographic services.

Your primary responsibilities:

• Serve as the senior technical advisor and subject matter expert for Public Key Infrastructure (PKI), certificate lifecycle management, cryptographic trust services, and enterprise certificate consumption patterns.
• Define and drive the strategic roadmap for PKI modernization, ensuring DTCC's certificate and trust infrastructure remains secure, scalable, resilient, and aligned with evolving business and regulatory requirements.
• Lead the design and modernization of internal certificate authority (CA) platforms and supporting trust services, establishing target architectures, engineering standards, and implementation roadmaps.
• Develop enterprise patterns and best practices for automated certificate issuance, ephemeral certificate usage, workload identity, machine authentication, and crypto-agile application design.
• Architect and guide the implementation of cloud-native PKI capabilities across public cloud environments, enabling secure certificate services for modern applications, platforms, and infrastructure.
• Drive the automation and modernization of external PKI services and certificate management processes, improving scalability, reliability, operational efficiency, and risk reduction.
• Lead DTCC's technical strategy for cryptographic agility and post-quantum cryptography (PQC) adoption, evaluating emerging standards, technologies, and migration approaches while defining implementation guidance for engineering teams.
• Establish PKI reference architectures, trust models, certificate governance standards, and integration patterns that support consistent adoption across enterprise platforms and applications.
• Evaluate emerging technologies, vendor solutions, and architectural approaches to strengthen DTCC's cryptographic security posture and accelerate modernization initiatives.
• Collaborate with engineering, architecture, security, infrastructure, and…