Encryption Agility Team Architect
On-siteHyderabad, Telangana, India
Job Summary
Define the technical roadmap and reference architectures for Amgen's Post-Quantum Cryptography readiness across applications, cloud, identity, and infrastructure. Translate NIST standards into secure patterns, Cryptographic Bill of Materials operating models, and remediation guidance for legacy systems. Partner with PKI, KMS, and engineering teams to establish certificate lifecycle management, key rotation policies, and hybrid TLS transition strategies. Conduct hands-on reviews of cryptographic scan outputs, source code findings, and vendor evidence to validate implementation patterns and security baselines. Lead design reviews for PQC pilots and coordinate with global stakeholders to sequence discovery and remediation for business-critical applications and Operational Technology.
Required Qualifications
- Doctorate degree and 2 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience
- Master's degree with 8 to 10 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience
- Bachelor's degree with 10 to 14 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience
- Diploma with 14 to 18 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience
- Expert hands-on knowledge of enterprise cryptography and security architecture, including PKI, X.509 certificates, TLS, cipher suites, KMS, HSMs, secrets management, key lifecycle, encryption at rest, encryption in transit, cloud key services, identity protocols, and certificate lifecycle automation
- Practical experience architecting cryptographic modernization, crypto agility, post-quantum cryptography, hybrid transition patterns, discovery-to-remediation workflows, CBOM-driven inventory, and Steal-Now-Decrypt-Later risk reduction in a complex enterprise environment
- Strong ability to translate cryptographic policy and standards into enforceable technical controls across CI/CD, SSDLC, cloud platforms, PKI/certificates, KMS/secrets, identity, infrastructure, applications, third-party governance, and risk management
- Ability to perform hands-on analysis of cryptographic discovery findings, source code patterns, certificate chains, TLS/cipher data, cloud key configurations, key rotation status, secrets exposure, and architecture designs, then convert findings into practical remediation guidance
Desired Qualifications
- Hands-on experience with ServiceNow CMDB/GRC, Guard, Wiz, Qualys, Fortinet, Netskope, CrowdStrike, GitLab, Veracode, GitGuardian, AWS KMS, AWS ACM, AWS Secrets Manager, Microsoft PKI, Sectigo, HashiCorp Vault, HSMs, CLM platforms, and SIEM/data lake integrations
- Experience designing or operating CBOM/SBOM data models using CycloneDX 1.6+, Application Programming Interfaces (APIs), Comma-Separated Values (CSV), JavaScript Object Notation (JSON), dashboards, data quality controls, and audit-ready reporting
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.