{"id":2565778,"url":"https://alion.io/job/american-express-director-cryptographic-architecture-engineering","title":"Director - Cryptographic Architecture & Engineering","company":{"id":2209,"name":"American Express","domain":"americanexpress.com","url":"https://alion.io/company/american-express","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":100,"open_postings":54,"ghost_share":0,"stale_share":0.056,"repost_share":0.185,"time_to_fill_p50_days":7,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Phoenix, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":149000,"max_usd":280000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":2407},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"PKI","optional":false}],"status":"live","first_seen_at":"2026-10-13T20:58:10Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-17T15:11:03Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.\nThe Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.\nAt American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage-empowering you to innovate, grow, and help shape the future of a Fortune 100 company.\nTrust. Service. Security.\nThe Data Security team is responsible for safeguarding the organization’s most critical asset-its data-by ensuring confidentiality, integrity, and availability across all platforms and environments. Working at the intersection of cybersecurity, data governance, and privacy, the Data Security team focuses on capabilities such as data classification, encryption, secure data access, and monitoring. The team partners closely with engineering, risk, and business units to embed security controls throughout the data lifecycle-from creation and storage to sharing and archival.\nThis roles leads the design and modernization of enterprise cryptographic architecture, translating Data Security standards and emerging cryptographic requirements into implementable, reusable and increasingly automated security capabilities.\nProvides technical leadership across payment and non-payment encryption, key management and HSMs, certificate and PKI architecture, cloud cryptography, post-quantum readiness and crypto-agility, and emerging cryptographic technologies including blockchain and distributed-ledger use cases.\nThe successful candidate will combine deep cryptographic expertise with strong engineering capability, moving beyond traditional architecture documentation to create architecture-as-code, reusable patterns, reference implementations, APIs and automated security guardrails that engineering teams can directly consume.\nDefine enterprise cryptographic architecture and strategic patterns across payment and non-payment environments, applications, APIs, databases, cloud platforms and infrastructure.\n\nLead post-quantum cryptography readiness and crypto-agility, including cryptographic inventory and CBOM, identification of quantum-vulnerable implementations, migration patterns and modernization roadmaps.\n\nProvide architecture leadership for payment cryptography, including payment HSMs, payment key management, cryptographic key hierarchies and applicable PCI requirements.\n\nDesign modern approaches for enterprise encryption, key management, HSM/HSMaaS, PKI and certificates, digital signatures and cloud-native cryptography.\n\nEvaluate emerging cryptographic technologies and use cases, including blockchain and distributed ledgers, advanced digital-signature approaches and other modern cryptographic techniques.\n\nTranslate Data Security standards into architecture-as-code, reusable engineering patterns, reference implementations, APIs and automated guardrails.\n\nPartner directly with engineering teams to prototype, validate and implement cryptographic solutions rather than relying solely on architecture documentation.\n\nIntegrate cryptographic requirements and security telemetry into the SDLC and Permit to Operate, enabling earlier identification and enforcement of security requirements.\n\nDrive adoption of strategic enterprise cryptographic services and identify opportunities to simplify or retire fragmented and legacy implementations.\n\nAssess cryptographic risk based on algorithm strength, key protection, data sensitivity, threat exposure, implementation architecture and evolving industry standards.\n\nProvide senior technical leadership for significant cryptographic vulnerabilities, incidents, architecture decisions and technology transformations.\n\nMentor architects and engineers and raise cryptographic engineering capability across the organization.\n\n Significant experience in cryptographic engineering, cybersecurity architecture, applied cryptography or security engineering in a large-scale technology environment.\n\nDeep knowledge of symmetric and asymmetric cryptography, encryption, digital signatures, hashing, TLS, key establishment and exchange, and modern cryptographic protocols.\n\nStrong experience with HSMs, enterprise key-management systems, PKI, certificates and cryptographic key lifecycle management.\n\nExperience designing encryption solutions across applications, APIs, databases, infrastructure and cloud environments.\n\nDemonstrated ability to translate security requirements into working technical architectures and reusable engineering patterns.\n\nSoftware engineering or automation capability sufficient to develop prototypes, integrations, policy or architecture-as-code and technical reference implementations.\n\nExperience working across engineering, architecture, product and cybersecurity organizations.\n\nAbility to communicate complex cryptographic concepts, risks and architecture decisions to engineering teams and senior leadership.\n\nPost-quantum cryptography (PQC), NIST PQC standards and enterprise crypto-agility programs.\n\nExperience within financial services or another highly regulated environment.\n\nCloud KMS and HSM architectures across AWS, Azure and/or GCP.\n\nLarge-scale cryptographic migrations or modernization programs.\n\nPayment cryptography, payment HSMs, payment key management and PCI requirements.\n\nHighly Desired Experience\nCryptographic inventory and Cryptographic Bill of Materials (CBOM) capabilities.\n\nBlockchain and distributed-ledger cryptography and associated key and signature architectures.\n\nDevSecOps, architecture-as-code, policy-as-code and automated SDLC security enforcement.\n\nWhat Makes This Role Different\nThis is not a traditional architecture role centered on reviewing designs and producing documentation.\nThe role is expected to turn cryptographic strategy and standards into capabilities that engineers can implement: Standards -> Architecture -> Code and Patterns -> Enterprise Services -> Automated Assurance.\nSuccess means making secure cryptography easier, faster and more consistent to implement while preparing the enterprise for major transitions such as post-quantum cryptography. Hands-on engineering capability is strongly preferred.","description_format":"text","description_chars":7206,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Digital Signature","Payment Processing & Gateways","Crypto Wallets"],"lifecycle":[{"event":"open","at":"2026-10-14T21:55:44Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 101 · green card filings: 30","filings_12m":101,"filings_prev_12m":132,"green_card_filings_12m":30,"median_offered_wage_usd":139485,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.892,"p_room":0.9,"age_days":3,"expected_fill_days":7,"reasons":["conf:0","velocity","win:mid","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/american-express-director-cryptographic-architecture-engineering","json_url":"https://alion.io/job/american-express-director-cryptographic-architecture-engineering.json","meta":{"generated_at":"2026-10-18T01:07:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1858,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2209},"rest":"https://alion.io/mcp/rest/get_company?id=2209"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famerican-express-director-cryptographic-architecture-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famerican-express-director-cryptographic-architecture-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famerican-express-director-cryptographic-architecture-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/american-express-director-cryptographic-architecture-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famerican-express-director-cryptographic-architecture-engineering"}]}