Cryptographic Agility & Post-Quantum (PQC) Engineer

Who We Are Looking For

State Street is seeking a Cryptographic Agility & Post-Quantum (PQC) Engineer to help shape and deliver the firm's enterprise cryptographic modernization strategy. This role is ideal for a cybersecurity professional with a strong foundation in cryptography, encryption technologies, and security engineering who is passionate about preparing the organization for emerging cryptographic threats, including the impact of quantum computing.

The successful candidate will partner across cybersecurity, architecture, engineering, infrastructure, and application teams to establish and operationalize a formal cryptographic agility capability. You will help ensure the organization can efficiently identify cryptographic dependencies, evaluate emerging standards, and execute controlled transitions to new cryptographic algorithms while maintaining security, compliance, and business continuity.

• Mature the enterprise Cryptographic Agility program, enabling the organization to respond effectively to evolving cryptographic risks and industry standards.
• Develop and maintain an inventory of cryptographic assets, dependencies, algorithms, protocols, certificates, keys, and related technologies across applications, platforms, and infrastructure.
• Identify systems utilizing vulnerable, deprecated, or legacy cryptographic algorithms and define remediation and migration strategies.
• Evaluate emerging post-quantum cryptography (PQC) standards and technologies, with a focus on NIST-approved cryptographic algorithms and industry best practices.
• Define approved cryptographic migration paths, transition frameworks, and implementation guidance for application and platform teams.
• Partner with enterprise architecture, platform engineering, application development, PKI, and infrastructure teams to assess cryptographic readiness and capabilities.
• Pilot and validate PQC-enabled technologies, services, and solutions to support future enterprise adoption.
• Develop standards, procedures, and technical guidance supporting cryptographic agility and quantum readiness initiatives.
• Monitor changes in the cryptographic landscape, including advancements in quantum computing, regulatory expectations, and industry standards.
• Produce metrics, dashboards, and executive reporting to track cryptographic risk, migration progress, and PQC readiness across the enterprise.
• Contribute to strategic security initiatives focused on strengthening the organization's long-term cryptographic resilience.

• Understanding of modern cryptographic concepts, encryption technologies, PKI, certificate management, and key management systems.
• Experience assessing security risks and translating technical findings into actionable remediation plans.
• Ability to collaborate effectively across diverse technology and business teams to drive enterprise-wide initiatives.
• Strong analytical and problem-solving skills with a structured approach to complex technical challenges.
• Curiosity and a desire to stay current with advancements in cybersecurity, cryptography, and quantum computing.
• Excellent written and verbal communication skills, including the ability to present technical concepts to both technical and non-technical audiences.
• A proactive mindset focused on continuous improvement, operational excellence, and risk reduction.
• Experience working within highly regulated financial services or other complex enterprise environments is a plus.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, Mathematics, or a related discipline, or equivalent work experience.
• 5+ years of experience in cybersecurity, security engineering, encryption, PKI, key management, infrastructure security, or a related field.
• Working knowledge of cryptographic algorithms, protocols, and security controls used in enterprise environments.
• Experience with enterprise operating systems, cloud platforms, and distributed application architectures.
• Familiarity with cloud platforms such as AWS, Microsoft Azure, OCI, or Google Cloud Platform.
• Exposure to post-quantum…