Job Description

Who we are looking for

State Street Global Cyber Security is seeking a PKI Engineering & Operations Manager to own the engineering, operational reliability, and control posture of the firm’s certificate lifecycle management capability. The role leads day-to-day PKI “build and run” outcomes across our public key infrastructure (PKI), ensuring secure issuance, inventory, monitoring, renewal, and revocation processes at enterprise scale. This role is accountable for automation through orchestrators, audit readiness, and reducing outage risk from expiring or non-compliant certificates.

This role can be performed in a hybrid model, where you can balance work from home and office to match your needs and role requirements.

What you will be responsible for

As PKI Engineering & Operations Manager you will:

• Own end-to-end certificate lifecycle management outcomes (request → issuance → installation → inventory → monitoring → renewal → revocation/CRL), ensuring process consistency and operational resilience.
• Lead platform operations for PKI Infrastructure (enterprise certificate visibility, expiration scanning rules, alerting), and ensure public Certificate Authority usage aligns to standards and audit expectations.
• Drive remediation of certificate vulnerabilities, including eliminating self-signed / non-compliant certificates identified through scanning and operational review.
• Deliver automation and integration with enterprise platforms (e.g., orchestrator integrations across cloud and infrastructure, plus workflow alignment through service management tooling).
• Own PKI operational readiness: monitoring (e.g. logs/dashboards), incident/problem response, runbooks, and continuous improvement.
• Execute operational governance: recertification cadence, evidence generation, documentation/diagrams, and sustainability of key PKI processes/integrations.
• Partner with application and infrastructure teams on CSR intake, change control alignment, and timely renewal/rotation planning to prevent outages.
• Coordinate security and risk activities for PKI tooling (e.g., assessments / reviews as required by internal risk frameworks) and maintain audit-ready artifacts.

What we value

These skills will help you succeed in this role:

• Strong PKI engineering + operations mindset (availability, change control discipline, operational hygiene, measurable reliability).
• Proven ability to reduce enterprise risk through automation, standardization, monitoring, and documentation.
• Excellent stakeholder management across app teams, infrastructure, audit/risk partners, and service management functions.
• Ability to translate certificate risk into clear priorities and enforceable operational plans.
• Hands-on comfort with certificate monitoring and compliance scanning workflows (including inventory/expiration and non-compliance discovery).

Education & Preferred Qualifications

• 8+ years in PKI / certificate lifecycle management engineering and operations (enterprise scale). (Suggested)
• Deep experience with PKI infrastructure and enterprise CA integration (such as DigiCert).
• Experience integrating PKI with monitoring/SIEM and operational evidence practices.
• Bachelor’s degree (or equivalent experience). (Suggested)
• Security / cloud certs are a plus (e.g., cloud security, PKI, crypto). (Suggested)

Salary Range:

$120,000 - $202,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.