What are the responsibilities and job description for the Cryptography Platform and Services Technologist Lead position at BNY External Career Site?
We’re seeking a future team member for the role of Cryptography Platform and Servies Technologist Lead
to join our Cybersecurity Organization team. This role is located in NYC/NJ, Lake Mary, Florida, or Pittsburgh PA
In this role, you’ll make an impact in the following ways:
- Lead BNY Key Management solutions across BNY Enterprise
- Design, implement, and support Cryptography Key Management solution across BNY Enterprise.
- Design, implement, and support Cryptography Asset Management solution across BNY Enterprise.
- Ability to respond to requests from LOB, Internal Audit, and Federal Regulators on BNY Key Management ecosystem
- Train enterprise on PKI platforms, HSMs, and Key Management systems.
- Collaborate with compliance teams to align solutions with regulatory frameworks such as GDPR, DORA, NIST, and ISO 27001.
To be successful in this role, we’re seeking the following:
- Master’s in information security or related fields.
- 5-10 years of work experience in cyber security, architecture design, Key Management and PKI solutions.
- Key Management (HSM, Thales Products (Ciphertruct, DPOD), Oracle Key Vault)
- HSM, RSASecurID, cryptographic algorithms (e.g., RSA, AES), protocols (e.g., SSL/TLS, IPSec, SSH, Kerberos)
- Security policies, disaster recovery, change management, risk assessment, threat modeling
- Security within Cloud Services (AWS, Azure), Cisco routers and switches, IoT
- ISO/IEC 27001, PCI DSS, X.509, IEEE 802.1X, FISMA, NIST, MITRE, COBIT, ITIL
- Ability to train enterprise on HSMs and Key Management systems.
- Knowledge of Cryptographic algorithms and cryptographic principles, including digital signatures and blockchain systems.
- Familiarity with compliance frameworks such as GDPR, DORA, NIST, and ISO 27001.
- Experience with Key Management systems, HSMs, and PKI Platforms.
- Experience in global Financial Services security ecosystem is preferred.
- Practical experience with PKI, HSM, RSA SecurID, PGP,cryptographic algorithms (e.g., RSA, AES), protocols (e.g., SSL/TLS, IPSec, SSH, Kerberos).
- Practical experience in Thales HSM, Thales SAAS Products, Thales Ciphertrust, Oracle Key Vault
- Hands-on experience with Thale’s products and Oracle key management products.
- Strong communication skills for presenting Key Management concepts to diverse technical and non-technical audiences.
- Certifications: Certified Information Systems Security Professional CISSP, Cisco Certified Entry Network Technician CCENT, Certified Technical Trainer CTT etc.
- Experience with Cybersecurity policies, cryptographic algorithms, Public Key Infrastructure (PKI), HSM, and key management systems.