Security Engineer - Vice President - IAM

As a Vice President within Goldman Sachs’ Identity Security (IAM) organization, this role leads the global strategy and engineering execution for enterprise trust services. You will own the roadmap and operational delivery for PKI, cryptography, and digital certificate lifecycle management across multi-cloud, on-premises, and IoT environments, while managing a team of security engineers.

Working in Jersey City, NJ in a hybrid setup, you will help ensure robust, compliant, and highly available certificate and key management services aligned to recognized industry standards.

What you’ll do

• Lead global strategy, engineering, deployment, and operations for enterprise Public Key Infrastructure (PKI), cryptography, and digital certificate lifecycle management.
• Ensure trust services remain robust, compliant, and highly available, guided by standards from organizations such as the NIST Computer Security Resource Center and the CA/Browser Forum.
• Define and execute the global enterprise roadmap for PKI, certificate management, and cryptographic services in alignment with cybersecurity and business objectives.
• Oversee the design, implementation, and maintenance of internal and external Certificate Authorities (CAs), Registration Authorities (RAs), Hardware Security Modules (HSMs), and Key Management Systems (KMS).
• Drive adoption of automated certificate lifecycle management (CLM) tools and protocols such as ACME, EST, and SCEP to reduce manual effort and prevent outages from expired certificates.
• Maintain strict adherence to cryptographic standards, industry regulations, and audit requirements including WebTrust, SOC 2, and ISO 27001, and establish or maintain the enterprise Certificate Policy and Certification Practice Statement (CP/CPS).
• Architect scalable PKI solutions for modern environments, including Kubernetes, service meshes, and hybrid cloud deployments on AWS, Azure, and GCP.
• Serve as the escalation point for cryptographic vulnerabilities, certificate-related outages, and emergency key rotations.
• Manage relationships with external Certificate Authorities and security vendors.
• Represent the organization in industry consortiums to track emerging cryptographic trends, including Post-Quantum Cryptography (PQC).

Required qualifications

• Ability to thrive in a global, fast-paced, result-oriented, hybrid workplace.
• Strong team orientation and willingness to work within a global organization.
• Enjoyment of working in an Agile environment.
• Emphasis on personal initiative and ownership.
• Customer focused, with value placed on good developer experience.
• Passion for learning new technologies.
• 8+ years of experience (minimum).
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or a related field.

Core technologies

• ACME, EST, SCEP
• NIST Computer Security Resource Center, CA/Browser Forum
• Kubernetes, service meshes
• AWS, Azure, GCP
• Post-Quantum Cryptography (PQC)
• WebTrust, SOC 2, ISO 27001
• CP/CPS, TLS/SSL, SSH

Compensation & benefits

Salary: USD 130,000 - 250,000 per year.

• Healthcare & Medical Insurance
• Holiday & Vacation Policies
• Financial Wellness & Retirement
• Health Services
• Fitness
• Child Care & Family Care

Preferred qualifications

• 10+ years of experience in cybersecurity and information technology, including 8+ years of dedicated leadership experience in PKI, cryptography, and data protection.
• Deep understanding of asymmetric/symmetric cryptography, TLS/SSL protocols, SSH key management, code signing, and HSM management.
• Preferred certifications include CISSP, CISM, or specialized cryptographic credentials.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or a related field.