SSH & Machine Identity Engineer

Who We Are Looking For

This role will provide dedicated engineering ownership for enterprise SSH capabilities, including the planned SSH Certificate Authority, SSH key lifecycle management, machine identity governance and automation across the organization. We are looking for a senior engineer who can lead the design and adoption of SSH CA capabilities and establish stronger ownership, standards and automation for SSH across the enterprise. The role should connect SSH governance with the broader machine identity and cryptographic services strategy.

This role will provide dedicated engineering ownership for enterprise SSH capabilities, including the planned SSH Certificate Authority, SSH key lifecycle management, machine identity governance and automation across the organization. We are looking for a senior engineer who can lead the design and adoption of SSH CA capabilities and establish stronger ownership, standards and automation for SSH across the enterprise. The role should connect SSH governance with the broader machine identity and cryptographic services strategy.

• Lead engineering and implementation of the enterprise SSH Certificate Authority capability.
• Define SSH certificate, SSH key lifecycle, trust and access patterns across the organization.
• Drive SSH key discovery, ownership mapping, remediation and lifecycle governance.
• Develop automation for SSH certificate issuance, rotation, revocation and reporting.
• Partner with infrastructure, Linux, cloud, privileged access and application teams to onboard SSH use cases.
• Align SSH capabilities with broader machine identity management, PKI and crypto operations strategies.
• Support vaults/secrets management integration points where SSH credentials or keys require stronger control.
• Define operational runbooks, monitoring requirements and escalation paths for SSH-related services.
• Support audit, risk and regulatory inquiries related to SSH controls and machine identities.
• Contribute to the long-term vision for centralized crypto operations support.

• Strong ownership mindset with the ability to drive execution across multiple teams.
• Practical focus on risk reduction, operational simplification, automation and measurable outcomes.
• Ability to communicate clearly with technical teams, leadership, audit and risk stakeholders.

• 7+ years of cybersecurity, infrastructure, Linux, identity, PKI or privileged access engineering experience.
• Strong understanding of SSH, SSH keys, SSH certificates, Linux/Unix access patterns and privileged access controls.
• Experience with certificate authorities, PKI concepts, machine identity management and secrets management platforms.
• Experience automating identity, access or infrastructure workflows using scripts, APIs or orchestration tools.
• Strong knowledge of enterprise risk, audit evidence, operational controls and security standards.
• Strong ability to influence across multiple technology teams and drive adoption of new security capabilities.

$120,000 - $202,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes:

• our retirement savings plan (401K) with company match;
• insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages;
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities;
• access to our Employee Assistance Program;
• incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans);
• eligibility for certain tax advantaged savings plans;

For a full overview, visit

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart,…