Morgan Stanley
Lead Cryptography Engineer - PKI
$155K–$215K
New York, New York · Hybrid · Full-time · Posted Oct 5, 2026
- Experience
- 10+ years of hands-on cybersecurity engineering or operations experience; no alternatives stated.
- Education
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
About the job
Designs, operates, and advances enterprise cryptographic services, including PKI, HSMs, certificate lifecycle management, secrets management, and post-quantum cryptography capabilities.
What you'll do
- Design, implement, maintain, and monitor cryptographic infrastructure and services, including 24/7 operational support and incident response.
- Manage certificate and key lifecycles; automate related processes and integrate cryptographic controls with enterprise and cloud systems.
- Support architectural decisions and adoption planning for post-quantum cryptography and crypto-agility; collaborate with product and technical teams.
What they ask for
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- 10+ years of hands-on experience in cybersecurity engineering or operations, with exposure to cryptographic services.
- Strong understanding of cryptographic principles, protocols, and standards, plus enterprise or cloud PKI and certificate lifecycle management.
- Hands-on HSM and key management experience, and familiarity with automation and scripting.
Nice to have
- Knowledge of Post-Quantum Cryptography and crypto-agility concepts; CISSP, CISM, or vendor-specific PKI/HSM certifications.
- Prior experience leading or driving change in a security function.
Pay
$155,000 and $215,000 per year (USD), base pay
Tools
PKI, HSMs, TLS, X.509, Python, PowerShell, Post-Quantum Cryptography (PQC)
Model-written summary · the original posting is authoritative