Security Engineer - Cryptographic Engineer for Post Quantum Cryptography

PNC’s Technology organization is seeking a Security Engineer with a cryptographic engineering focus, including post-quantum cryptography (PQC) capabilities. This onsite role in Farmers Branch, TX supports the design, build, and ongoing operation of enterprise cryptographic and security solutions across multiple platforms.

Role Overview

In this position, you will provide cryptographic subject matter expertise and work with architecture, operational teams, and delivery stakeholders to take high-level security designs into implementable solutions. Responsibilities span PKI and key management, tokenization, and related tooling, with support for production environments and alignment to governance and change control processes.

Location: Farmers Branch, TX (onsite)

Compensation: USD 91,000 - 185,900 per yearly

Responsibilities

• Provide subject matter expertise applying security concepts to design, build, and maintain technology solutions, including ownership of deliverables tied to project timelines.
• Partner with architecture teams to translate high-level designs into implementation specifics such as sizing, integration details, onboarding, and operationalization.
• Evaluate patches, updates, and ongoing maintenance activities, determining impacts to existing solutions when new standards are introduced and ensuring alignment through change control and governance processes.
• Develop detailed implementation, configuration, design, and engineering documentation, and build and implement cryptographic/security solutions.
• Work with operational partners to enable transitions and day-to-day supportability.
• Provide engineering support for production technology and collaborate with other groups as needed, while building a broad knowledge base that complements specific areas of expertise.

Required Experience and Skills

• Experience with an enterprise centralized cryptographic program.
• Cryptographic lifecycle management, including secure environments, key ceremonies, and chain of custody controls.
• Key management solutions across cloud and data platforms, including AWS, Azure, MSSQL, Oracle, Linux, MongoDB, Pure, and Neo4j.
• Public Key Infrastructure (PKI) capabilities, including certificate lifecycle management (issuance, renewal) and troubleshooting.
• Application layer protection technologies and tokenization strategies.
• Cryptographic inventory awareness and integration across platforms to support enterprise visibility.
• Familiarity with cryptographic agility principles, post-quantum tooling, and quantum-safe technologies, including the impact of quantum computing on enterprise security and strategic planning.
• Hands-on experience with cryptographic platforms and tooling.

Specific Technologies and Tools

• Key Management: Oracle Key Manager, Thales CipherTrust Manager
• HSMs: Thales, SWIFT, Entrust
• PKI/Certificate Management: Venafi, Microsoft ADCS
• Tokenization: Protegrity
• Cryptographic Inventory: AgileSec Analytics
• Workflow and collaboration: Jira, Confluence, SharePoint, ServiceNow
• Data visualization and reporting: Tools supporting reporting, dashboarding, and analytics (OpenSearch preferred)

Standards, Guidance, and Program Knowledge

• Knowledge of PCI standards and FIPS requirements, including validation, plus FIPS and NIST cryptographic guidance for current and emerging standards.
• Foundational understanding of cryptographic agility principles in enterprise environments.
• Familiarity with industry guidance and collaboration bodies (G7, FS-ISAC, FSSCC, CNSA) related to PQC roadmap development and migration planning.

Additional Qualifications

• Ability to complete initiatives and business as usual (BAU) work.
• Strong analytical and problem-solving skills for complex issue resolution.
• High precision implementing and validating cryptographic controls and processes.
• Ability to communicate complex technical concepts to non-technical stakeholders and collaborate across teams.
• Ability to stay current with evolving security threats, technologies, and cryptographic standards.
• Skill in producing clear documentation, including policies, procedures, technical designs, and executive-level materials.
• Forward-thinking approach to long-term solution implications, including definition and tracking of metrics and key risk indicators (KRIs).
• Participation in cryptographic working groups or standards bodies (FS-SIAC, X9, PKI Consortium, etc.).

Education, Experience, and Certifications

• Minimum experience: 5 years
• Education: Bachelors
• Certifications: No Required Certification(s)

For roles at this level, a university or college degree is typically required, with 5+ years of industry-relevant experience. A comparable combination of education, job-specific certification(s), and experience, including military service, may be considered in lieu of a degree.

Benefits

• Medical/prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long-term disability protection
• 401(k) with PNC match
• Pension and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• 15 to 25 vacation days each year depending on career level and years of service
• Paid time off and other programs depending on eligibility (refer to pncthrive.com)

PNC Expectations

• Customer Focused: Knowledgeable of values and practices that align customer needs and satisfaction as primary considerations in business decisions, including ability to leverage this information for customized customer solutions.
• Managing Risk: Assessing and effectively managing risks associated with business objectives and activities to ensure adherence to and support of PNC’s Enterprise Risk Management Framework.

Preferred Skills and Competencies

• Preferred skills: Access Control (AC), Building Architecture, Cryptography, Customer Solutions, Disaster Recovery Planning, Hardware Security Modules (HSM), Information Security, Network Security, Physical Security, Public Key Infrastructure, Quantum Cryptography, Risk Assessments, Security Technologies
• Competencies: Analytical Thinking, Effective Communications, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Network and Internet Security, Problem Solving, Technical Troubleshooting

Application Window

Generally, this opening is expected to be posted for two business days from 06/04/2026, although it may be longer with business discretion.

Disability Accommodations

If an accommodation is required to participate in the application process, contact [email protected]. Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance.

Equal Employment Opportunity

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law. This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.

California Residents

Refer to the California Consumer Privacy Act Privacy Notice to understand how PNC may use or disclose personal information in hiring practices.

Additional Position Details

• Position subject to incentive eligibility: This role is incentive eligible with payment based upon company, business and/or individual performance.
• Salary transparency: Base Salary: $91,000.00 – $185,900.00. Salaries may vary based on geographic location, market data, and individual skills, experience, and education.

Technologies

• AWS, Azure, MSSQL, Oracle, Linux, MongoDB, Pure, Neo4j
• PKI, Oracle Key Manager, Thales CipherTrust Manager, Thales, SWIFT, Entrust
• Venafi, Microsoft ADCS, Protegrity, AgileSec Analytics
• Jira, Confluence, SharePoint, ServiceNow, OpenSearch
• PCI standards, FIPS, NIST cryptographic guidance
• G7, FS-ISAC, FSSCC, CNSA, FDIA, SAFE Act, FINRA
• EC Council’s Certified Encryption Specialist