„American Express“ yra pasaulinė finansinių paslaugų įmonė, veikianti bankininkystės, finansavimo ir verslo mokėjimų srityse. Jos veikla apima vartotojams, įmonėms ir korporacijoms skirtas kredito korteles, mokėjimų ir prekybininkų paslaugas, taupomąsias sąskaitas, terminuotuosius indėlius ir asmenines paskolas, taip pat apdovanojimų ir kelionių programas, įmonių mokėjimo sprendimus, finansinį švietimą, saugumo paslaugas bei pagalbą kortelių nariams ir prekybininkams.
Director of Cryptographic Architecture and Engineering
Lead cryptographic architecture modernization at American Express, spanning payment security, enterprise encryption, and post-quantum readiness. Build reusable engineering patterns, APIs, and automated security controls.
Aprašymas
- Set enterprise cryptographic architecture and patterns for payment and non-payment systems, applications, APIs, databases, cloud platforms, and infrastructure.
- Lead post-quantum readiness and crypto-agility, including cryptographic inventories and CBOMs, discovery of quantum-vulnerable implementations, migration patterns, and modernization roadmaps.
- Guide payment cryptography architecture, including payment HSMs, payment key management, key hierarchies, and applicable PCI requirements.
- Design enterprise approaches to encryption, key management, HSM and HSMaaS, PKI, certificates, digital signatures, and cloud-native cryptography.
- Assess emerging cryptographic technologies and applications, including blockchain, distributed ledgers, advanced digital signatures, and other modern techniques.
- Turn Data Security standards into architecture-as-code, reusable engineering patterns, reference implementations, APIs, and automated guardrails.
- Work with engineering teams to prototype, validate, and implement cryptographic solutions.
- Embed cryptographic requirements and security telemetry in the SDLC and Permit to Operate to identify and enforce security requirements earlier.
- Promote strategic enterprise cryptographic services and find ways to simplify or retire fragmented and legacy implementations.
- Evaluate cryptographic risk using algorithm strength, key protection, data sensitivity, threat exposure, implementation architecture, and evolving industry standards.
- Provide senior technical leadership on major cryptographic vulnerabilities, incidents, architecture decisions, and technology transformations.
- Mentor architects and engineers and build cryptographic engineering capability across the organization.
Reikalavimai
- Substantial experience in cryptographic engineering, cybersecurity architecture, applied cryptography, or security engineering in a large-scale technology environment.
- Deep understanding of symmetric and asymmetric cryptography, encryption, digital signatures, hashing, TLS, key establishment and exchange, and modern cryptographic protocols.
- Strong experience with HSMs, enterprise key management systems, PKI, certificates, and cryptographic key lifecycle management.
- Experience designing encryption solutions for applications, APIs, databases, infrastructure, and cloud environments.
- Ability to turn security requirements into practical technical architectures and reusable engineering patterns.
- Software engineering or automation skills sufficient to build prototypes, integrations, policy or architecture-as-code, and technical reference implementations.
- Experience collaborating across engineering, architecture, product, and cybersecurity teams.
- Ability to explain complex cryptographic concepts, risks, and architecture decisions to engineering teams and senior leaders.
- Experience with post-quantum cryptography, NIST PQC standards, and enterprise crypto-agility programs.
- Experience in financial services or another highly regulated industry.
- Experience with cloud KMS and HSM architectures on AWS, Azure, and/or GCP.
- Experience with large-scale cryptographic migrations or modernization programs.
- Knowledge of payment cryptography, payment HSMs, payment key management, and PCI requirements.
- Cryptographic inventory and Cryptographic Bill of Materials (CBOM) experience is highly desired.
- Blockchain and distributed-ledger cryptography, including related key and signature architectures, is highly desired.
- DevSecOps, architecture-as-code, policy-as-code, and automated SDLC security enforcement experience is highly desired.
- Hands-on engineering ability is strongly preferred.
Privalumai
- Bonus compensation.
- Equity, if applicable.
- Benefits.