Security Engineer - Cryptographic Engineer for Post Quantum Cryptography

PNC Financial Services Group is seeking a Security Engineer focused on cryptographic engineering for post-quantum cryptography within its Technology organization. This role supports enterprise cryptography work across the cryptographic lifecycle, with an emphasis on key management, PKI, tokenization, and compliance-oriented practices across solutions.

The position is onsite and based in Lakewood, CO. Work is aligned to enterprise security priorities across locations including Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX; Denver, CO, and Phoenix, AZ.

What you will do

• Provide subject matter expertise when applying security concepts, using technical knowledge and industry experience to design, build, and maintain technology solutions, including responsibility for deliverables aligned to project timelines.
• Partner with architecture to translate high-level designs into implementation specifics such as sizing, integration details, onboarding, and operationalization.
• Evaluate patches, updates, and ongoing maintenance activities, assessing impacts to existing solutions when new standards are introduced and using change control and governance processes to maintain alignment.
• Create detailed implementation, configuration, design, and engineering documentation, and build and implement cryptographic solutions.
• Coordinate with operational partners to enable transitions and day-to-day supportability.
• Deliver engineering support for production technology, collaborating with other groups as needed, and pursue opportunities to broaden knowledge alongside specific cryptographic expertise.

What you bring

• 5+ years of industry-relevant experience and a bachelor’s degree (roles at this level typically require a university or college degree).
• Experience with an enterprise centralized cryptographic program including cryptographic lifecycle management, secure environments, key ceremonies, and chain of custody controls.
• Key management experience across AWS and Azure and data platforms including MSSQL, Oracle, Linux, MongoDB, Pure, and Neo4j.
• Hands-on knowledge of PKI, including certificate lifecycle management, issuance, renewal, and troubleshooting.
• Experience with application layer protection technologies and tokenization strategies.
• Cryptographic inventory awareness and integration across platforms to support enterprise visibility.
• Familiarity with cryptographic agility principles, post-quantum tooling, and quantum-safe technologies.
• Advanced understanding of cryptographic solutions as they relate to strategic planning and the impact of quantum computing on enterprise security.
• Key management platform experience including Oracle Key Manager and Thales CipherTrust Manager.
• HSM experience with Thales, SWIFT, and Entrust.
• PKI and certificate management experience including Venafi and Microsoft ADCS.
• Tokenization experience including Protegrity.
• Cryptographic inventory experience including AgileSec Analytics.
• Proficiency with enterprise standard tools, including workflow and collaboration platforms: Jira, Confluence, SharePoint, and ServiceNow.
• Data visualization and reporting capabilities to support reporting, dashboarding, and analytics, with OpenSearch preferred.
• Knowledge of PCI standards, FIPS requirements (including validation), and NIST cryptographic guidance for current and emerging standards.
• Familiarity with industry guidance and collaboration bodies including G7, FS-ISAC, FSSCC, and CNSA related to PQC roadmap development and migration planning.
• Ability to deliver both initiatives and business as usual (BAU) activities to completion.
• Strong analytical and problem-solving skills, with precision in implementing and validating cryptographic controls and processes.
• Ability to translate complex technical concepts for non-technical stakeholders and collaborate across teams.
• Ability to stay current with evolving security threats, technologies, and cryptographic standards.
• Ability to produce clear, concise, and professional documentation for policies, procedures, technical designs, and executive-level materials.
• Forward-thinking mindset with ability to consider long-term implications, including defining and tracking metrics and key risk indicators (KRIs) to measure control effectiveness and program maturity.
• Certifications in cryptographic technologies or EC Council’s Certified Encryption Specialist.
• Participation in cryptographic working groups or standards bodies including FS-SIAC, X9, PKI Consortium (as listed).

Technologies you may work with

• AWS, Azure, MSSQL, Oracle, Linux, MongoDB, Pure, Neo4j
• PKI and cryptographic tooling: Oracle Key Manager, Thales CipherTrust Manager, Thales, SWIFT, Entrust, Venafi, Microsoft ADCS
• Tokenization: Protegrity
• Cryptographic inventory: AgileSec Analytics
• Workflow and collaboration: Jira, Confluence, SharePoint, ServiceNow
• Analytics and search: OpenSearch
• Standards and guidance: PCI standards, FIPS, NIST cryptographic guidance
• Collaboration bodies: G7, FS-ISAC, FSSCC, CNSA

Compensation

• Base Salary: $91,000.00 to $185,900.00 per year
• Salaries may vary based on geographic location, market data, and individual skills, experience, and education.
• This role is incentive eligible, with payment based on company, business, and/or individual performance.

Benefits

• Medical/prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short- and long-term disability protection
• 401(k) with PNC match
• Pension
• Stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• Between 15 to 25 vacation days each year, depending on career level
• Depending on eligibility: back-up child/elder care
• More details available at pncthrive.com (benefits for full time and part-time employees)

Application window

This opening is generally expected to be posted for two business days from 06/04/2026, though it may remain open longer based on business discretion.

Accommodation and equal opportunity information

• Disability accommodations: If an accommodation is required to participate in the application process, contact [email protected] or call 877-968-7762 and say “Workday”. All information provided is kept confidential and used only as needed for reasonable accommodations.
• Equal employment opportunity: PNC provides equal employment opportunity regardless of protected categories listed in the posting. The position is subject to requirements of Section 19 of the Federal Deposit Insurance Act (FDIA), and for registered roles, requirements under SAFE Act and/or FINRA that prohibit hiring individuals with certain criminal history.
• California residents: Refer to the California Consumer Privacy Act Privacy Notice to understand how PNC may use or disclose personal information in hiring practices.