Job Description

The Impact You Will Have in This Role:

Being a member of IT Cybersecurity Engineering and Operations at DTCC, your purpose is to provide best-in-class and versatile security services to the enterprise. As a Senior Solution Engineer within Cybersecurity Engineering, you will serve as the technical leader for DTCC's Public Key Infrastructure (PKI) services and cryptographic trust platforms. You will be responsible for advancing the architecture, strategy, and modernization of enterprise PKI capabilities while helping DTCC prepare for the next generation of cryptographic technologies.

This role will drive the evolution of DTCC's certificate management and trust services, including modernization of internal certificate authorities, automation of external PKI ecosystems, expansion of cloud-native PKI capabilities, adoption of crypto-agile architectures, and support for post-quantum cryptography (PQC). You will partner closely with engineering, operations, security, architecture, and application teams to establish scalable patterns and standards that strengthen DTCC's security posture while enabling innovation across the enterprise.

This role is an Individual Contributor role. You will serve as the senior technical authority for PKI architecture and strategy, working alongside engineering and operations teams to define the future of enterprise cryptographic services.

Your Primary Responsibilities:

• Serve as the senior technical advisor and subject matter expert for Public Key Infrastructure (PKI), certificate lifecycle management, cryptographic trust services, and enterprise certificate consumption patterns.
• Define and drive the strategic roadmap for PKI modernization, ensuring DTCC's certificate and trust infrastructure remains secure, scalable, resilient, and aligned with evolving business and regulatory requirements.
• Lead the design and modernization of internal certificate authority (CA) platforms and supporting trust services, establishing target architectures, engineering standards, and implementation roadmaps.
• Develop enterprise patterns and best practices for automated certificate issuance, ephemeral certificate usage, workload identity, machine authentication, and crypto-agile application design.
• Architect and guide the implementation of cloud-native PKI capabilities across public cloud environments, enabling secure certificate services for modern applications, platforms, and infrastructure.
• Drive the automation and modernization of external PKI services and certificate management processes, improving scalability, reliability, operational efficiency, and risk reduction.
• Lead DTCC's technical strategy for cryptographic agility and post-quantum cryptography (PQC) adoption, evaluating emerging standards, technologies, and migration approaches while defining implementation guidance for engineering teams.
• Establish PKI reference architectures, trust models, certificate governance standards, and integration patterns that support consistent adoption across enterprise platforms and applications.
• Evaluate emerging technologies, vendor solutions, and architectural approaches to strengthen DTCC's cryptographic security posture and accelerate modernization initiatives.
• Collaborate with engineering, architecture, security, infrastructure, and application teams to ensure cryptographic requirements and trust services are embedded into enterprise technology solutions.
• Act as a trusted advisor to senior technology and business leaders, communicating PKI strategy, architecture decisions, implementation risks, and modernization priorities.
• Mentor engineers, architects, and technical leads through architecture reviews, technical guidance, and knowledge sharing, helping elevate cryptographic expertise across the organization.
• Represent PKI and cryptographic trust services within enterprise architecture forums, strategic initiatives, and cross-functional programs to ensure long-term alignment with DTCC's technology and cybersecurity strategy.

NOTE: The Primary Responsibilities of this role are not limited to the details above.*

Qualifications:

• Minimum of 10 years of related experience
• Bachelor's degree preferred and/or equivalent experience

Talents Needed for Success:

• Deep expertise in Public Key Infrastructure (PKI), certificate authority technologies, certificate lifecycle management, cryptographic protocols, and trust architectures.
• Strong understanding of modern authentication, machine identity, workload identity, cloud security, and cryptographic automation patterns.
• Demonstrated experience designing enterprise-scale security architectures and driving large-scale modernization initiatives.
• Ability to influence technology direction through technical leadership, architecture expertise, and strategic vision.
• Presents information clearly in writing and orally in larger group settings.
• Convinces others on key topics by presenting persuasive arguments and alternative approaches.
• Inspires different approaches or ways of working.
• Inspires teams to constructively challenge established views.
• Sets an example for others by personally embracing change and building ownership through technical leadership and collaboration.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.