Director - Cryptographic Architecture & Engineering
Key Skills for This Role
Full Job Posting
Qualifications
- Significant experience in cryptographic engineering, cybersecurity architecture, applied cryptography or security engineering in a large-scale technology environment.
- Deep knowledge of symmetric and asymmetric cryptography, encryption, digital signatures, hashing, TLS, key establishment and exchange, and modern cryptographic protocols.
- Strong experience with HSMs, enterprise key-management systems, PKI, certificates and cryptographic key lifecycle management.
- Experience designing encryption solutions across applications, APIs, databases, infrastructure and cloud environments.
- Demonstrated ability to translate security requirements into working technical architectures and reusable engineering patterns.
- Software engineering or automation capability sufficient to develop prototypes, integrations, policy or architecture-as-code and technical reference implementations.
- Experience working across engineering, architecture, product and cybersecurity organizations.
- Ability to communicate complex cryptographic concepts, risks and architecture decisions to engineering teams and senior leadership.
- Post-quantum cryptography (PQC), NIST PQC standards and enterprise crypto-agility programs.
- Experience within financial services or another highly regulated environment.
- Cloud KMS and HSM architectures across AWS, Azure and/or GCP.
- Large-scale cryptographic migrations or modernization programs.
- Payment cryptography, payment HSMs, payment key management and PCI requirements.
- Highly Desired Experience
- Cryptographic inventory and Cryptographic Bill of Materials (CBOM) capabilities.
- Blockchain and distributed-ledger cryptography and associated key and signature architectures.
- DevSecOps, architecture-as-code, policy-as-code and automated SDLC security enforcement.
- What Makes This Role Different
- This is not a traditional architecture role centered on reviewing designs and producing documentation.
- The role is expected to turn cryptographic strategy and standards into capabilities that engineers can implement: Standards -> Architecture -> Code and Patterns -> Enterprise Services -> Automated Assurance.
- Success means making secure cryptography easier, faster and more consistent to implement while preparing the enterprise for major transitions such as post-quantum cryptography. Hands-on engineering capability is strongly preferred.
Responsibilities
- Define enterprise cryptographic architecture and strategic patterns across payment and non-payment environments, applications, APIs, databases, cloud platforms and infrastructure.
- Lead post-quantum cryptography readiness and crypto-agility, including cryptographic inventory and CBOM, identification of quantum-vulnerable implementations, migration patterns and modernization roadmaps.
- Provide architecture leadership for payment cryptography, including payment HSMs, payment key management, cryptographic key hierarchies and applicable PCI requirements.
- Design modern approaches for enterprise encryption, key management, HSM/HSMaaS, PKI and certificates, digital signatures and cloud-native cryptography.
- Evaluate emerging cryptographic technologies and use cases, including blockchain and distributed ledgers, advanced digital-signature approaches and other modern cryptographic techniques.
- Translate Data Security standards into architecture-as-code, reusable engineering patterns, reference implementations, APIs and automated guardrails.
- Partner directly with engineering teams to prototype, validate and implement cryptographic solutions rather than relying solely on architecture documentation.
- Integrate cryptographic requirements and security telemetry into the SDLC and Permit to Operate, enabling earlier identification and enforcement of security requirements.
- Drive adoption of strategic enterprise cryptographic services and identify opportunities to simplify or retire fragmented and legacy implementations.
- Assess cryptographic risk based on algorithm strength, key protection, data sensitivity, threat exposure, implementation architecture and evolving industry standards.
- Provide senior technical leadership for significant cryptographic vulnerabilities, incidents, architecture decisions and technology transformations.
- Mentor architects and engineers and raise cryptographic engineering capability across the organization.
Preferred Qualifications
- Highly Desired Experience
- Success means making secure cryptography easier, faster and more consistent to implement while preparing the enterprise for major transitions such as post-quantum cryptography. Hands-on engineering capability is strongly preferred.
About American Express
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at American Express
Manager, Digital Corporate Deployment
Minneapolis, USA
At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering diff
AI Engineer III
Sunrise, USA
Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range o
Associate-Tech Ops Support
New York City, USA
You Lead the Way. We’ve Got Your Back. At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial conf
Manager-Digital Product Management
Atlanta, USA
Create the World's Best Digital Colleague Experience The Digital Workplace Product Group within the Technology organization at American Express is responsible for delivering secure, scalable, and modern collaboration cap
Data Engineer III
, USA
Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range o
Manager, Digital Corporate Deployment
Minneapolis, USA
AI Engineer III
Sunrise, USA
Associate-Tech Ops Support
New York City, USA
Manager-Digital Product Management
Atlanta, USA
Data Engineer III
, USA
Manager-Business Development
, USA
AI Engineer III
Sunrise, USA
Sr Data Engineer - Financial Data Engineering
Phoenix, USA