American Express bank ishi, moliya va B2B to‘lovlari sohalarida faoliyat yurituvchi global moliyaviy xizmatlar kompaniyasidir. Kompaniya faoliyati jismoniy shaxslar, biznes va korporativ mijozlar uchun kredit kartalari; to‘lov va savdogarlarga xizmat ko‘rsatish xizmatlari; jamg‘arma hisobvaraqlari, depozit sertifikatlari va shaxsiy kreditlar; shuningdek, mukofotlar, sayohat dasturlari, korporativ to‘lov yechimlari, moliyaviy ta’lim, xavfsizlik xizmatlari hamda karta egalari va savdogarlarni qo‘llab-quvvatlashni o‘z ichiga oladi.
Director of Cryptographic Architecture and Engineering
Lead cryptographic architecture modernization at American Express, spanning payment security, enterprise encryption, and post-quantum readiness. Build reusable engineering patterns, APIs, and automated security controls.
Tavsif
- Set enterprise cryptographic architecture and patterns for payment and non-payment systems, applications, APIs, databases, cloud platforms, and infrastructure.
- Lead post-quantum readiness and crypto-agility, including cryptographic inventories and CBOMs, discovery of quantum-vulnerable implementations, migration patterns, and modernization roadmaps.
- Guide payment cryptography architecture, including payment HSMs, payment key management, key hierarchies, and applicable PCI requirements.
- Design enterprise approaches to encryption, key management, HSM and HSMaaS, PKI, certificates, digital signatures, and cloud-native cryptography.
- Assess emerging cryptographic technologies and applications, including blockchain, distributed ledgers, advanced digital signatures, and other modern techniques.
- Turn Data Security standards into architecture-as-code, reusable engineering patterns, reference implementations, APIs, and automated guardrails.
- Work with engineering teams to prototype, validate, and implement cryptographic solutions.
- Embed cryptographic requirements and security telemetry in the SDLC and Permit to Operate to identify and enforce security requirements earlier.
- Promote strategic enterprise cryptographic services and find ways to simplify or retire fragmented and legacy implementations.
- Evaluate cryptographic risk using algorithm strength, key protection, data sensitivity, threat exposure, implementation architecture, and evolving industry standards.
- Provide senior technical leadership on major cryptographic vulnerabilities, incidents, architecture decisions, and technology transformations.
- Mentor architects and engineers and build cryptographic engineering capability across the organization.
Talablar
- Substantial experience in cryptographic engineering, cybersecurity architecture, applied cryptography, or security engineering in a large-scale technology environment.
- Deep understanding of symmetric and asymmetric cryptography, encryption, digital signatures, hashing, TLS, key establishment and exchange, and modern cryptographic protocols.
- Strong experience with HSMs, enterprise key management systems, PKI, certificates, and cryptographic key lifecycle management.
- Experience designing encryption solutions for applications, APIs, databases, infrastructure, and cloud environments.
- Ability to turn security requirements into practical technical architectures and reusable engineering patterns.
- Software engineering or automation skills sufficient to build prototypes, integrations, policy or architecture-as-code, and technical reference implementations.
- Experience collaborating across engineering, architecture, product, and cybersecurity teams.
- Ability to explain complex cryptographic concepts, risks, and architecture decisions to engineering teams and senior leaders.
- Experience with post-quantum cryptography, NIST PQC standards, and enterprise crypto-agility programs.
- Experience in financial services or another highly regulated industry.
- Experience with cloud KMS and HSM architectures on AWS, Azure, and/or GCP.
- Experience with large-scale cryptographic migrations or modernization programs.
- Knowledge of payment cryptography, payment HSMs, payment key management, and PCI requirements.
- Cryptographic inventory and Cryptographic Bill of Materials (CBOM) experience is highly desired.
- Blockchain and distributed-ledger cryptography, including related key and signature architectures, is highly desired.
- DevSecOps, architecture-as-code, policy-as-code, and automated SDLC security enforcement experience is highly desired.
- Hands-on engineering ability is strongly preferred.
Imtiyozlar
- Bonus compensation.
- Equity, if applicable.
- Benefits.