{"id":429462,"url":"https://alion.io/job/amgen-encryption-agility-service-lead","title":"Encryption Agility Service Lead","company":{"id":4775,"name":"Amgen","domain":"amgen.com","url":"https://alion.io/company/amgen","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":347,"ghost_share":0,"stale_share":0.571,"repost_share":0.012,"time_to_fill_p50_days":43,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Science & Research","role_family":"Science & Research","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"HIPAA","optional":false},{"name":"PKI","optional":false},{"name":"Rest API","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Crowdstrike","optional":true},{"name":"GitLab","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"ITIL","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"SBOM","optional":true},{"name":"ServiceNow","optional":true},{"name":"SIEM","optional":true},{"name":"Veracode","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-07-21T00:00:00Z","employer_posted_date":"2026-07-21","last_verified_at":"2026-10-31T10:10:39Z","board_verified":true,"closed_at":null,"days_open":102,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":102},"description":"Career Category\nInformation SystemsJob Description\nRole Name: Senior Manager Information Security - Encryption Agility Service Lead\nJob Posting Title: Sr. Manager Information Security - Encryption Agility Service Lead\nWorkday Job Title: Sr. Manager Information Security\nDepartment Name: Trusted Core Technologies\nRole GCF: 6A\nABOUT AMGEN\nAmgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver innovative medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what's known today.\nABOUT THE ROLE\nRole Description:\nThe Senior Manager Information Security - Encryption Agility Service Lead is accountable for establishing, leading, and operating Amgen's enterprise Encryption Agility Service for Post-Quantum Readiness Preparation. This role will lead the Encryption Agility Team and be considered Amgen’s Cryptographic Center of Excellence! The team will own and manage the enterprise service for encryption, cryptography, crypto agility, and post-quantum cryptography readiness across Amgen. The role combines people leadership, security architecture, program execution, and hands-on cryptographic expertise across applications, cloud, infrastructure, identity, PKI, certificates, KMS, secrets, data protection, OT coordination, and the third-party ecosystem. The role partners closely with the Principal Architect, Digital Identity Access Services (DIAS), PKI and certificate service owners, Enterprise Architecture, Application Security, Governance Risk and Compliance, Procurement, Legal, Infrastructure, Cloud, Manufacturing/OT, and vendor teams to translate Amgen's PQC roadmap into governed standards, enforceable controls, measurable inventory, and prioritized remediation. The ideal candidate has strong people leadership skills, deep technical understanding of cryptography and cybersecurity, and experience managing large-scale enterprise security programs in a global, regulated environment.\nRoles & Responsibilities:\nEstablish, operate, and continuously improve the enterprise Encryption Agility Team and Service, including the service charter, governance model, operating cadence, intake process, Responsible, Accountable, Consulted, and Informed (RACI) model, roadmap, Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), executive reporting, and service improvement plan.\nLead, coach, mentor, and manage Encryption Agility Team members, including Amgen full-time employees (FTEs), external workers, cryptographic engineers, security architecture analysts, product ownership support, and part-time contributors from partner teams.\nPartner with the Principal Architect to translate enterprise Post-Quantum Cryptography (PQC) strategy into standards and specifications, reference architectures, implementation patterns, practical engineering guidance, remediation backlogs, and production-ready cryptographic design decisions.\nOwn the enterprise cryptographic standards and specifications roadmap, including approved algorithms, key sizes, protocols, Transport Layer Security (TLS) and cipher policies, certificate requirements, Key Management Services (KMS) and secrets requirements, exception criteria, Rivest-Shamir-Adleman (RSA) and Elliptic Curve Cryptography (ECC) sunset planning, and annual standards refresh.\nLead delivery across the full PQC lifecycle, including assessment wrap-up, quick wins, discovery tooling selection, iterative discovery, vendor and third-party outreach, PQC architecture, testing and trials, production rollout, automation, monitoring, and steady-state service operations.\nBuild, govern, and mature the Amgen Cryptographic Bill of Materials (CBOM), including required fields, asset ownership, quantum-vulnerability status, remediation status, data quality controls, reporting requirements, and integration of cryptographic inventory and risk data across relevant Amgen platforms.\nDirect enterprise cryptographic discovery across source code, binaries, cloud key services, endpoints, file systems, network traffic, Public Key Infrastructure (PKI) and certificates, KMS and secrets, vendor attestations, and Subject Matter Expert (SME) interviews to create a reliable enterprise cryptographic inventory.\nApply the approved PQC risk-prioritization approach to sequence discovery and remediation for business-critical applications, high-volume sensitive data flows, identity services, third-party dependencies, legacy platforms, Key Computerized Systems (KCS), and validated Good x Practice (GxP) systems.\nCoordinate with Digital Identity Access Services (DIAS), PKI service owners, certificate management teams, cloud, infrastructure, and platform teams on certificate visibility, Certificate Lifecycle Manager (CLM) evaluation, certificate rotation policy, manual-to-automated deployment migration, post-quantum PKI readiness, hybrid certificate testing, Certificate Authority (CA) roadmap, operational change windows, enterprise KMS strategy, Hardware Security Module (HSM) and cloud KMS roadmaps, secrets management, key rotation, key retirement, and centralized or federated key management control patterns.\nPartner with Application Security, Secure Software Development Lifecycle (SSDLC), DevOps, Artificial Intelligence (AI) Security, Enterprise Architecture, and engineering teams to publish approved cryptographic libraries, reusable patterns, Continuous Integration/Continuous Delivery (CI/CD) controls, scanning rules, secure code examples, and remediation playbooks.\nCoordinate with Risk and Compliance, Legal, Procurement, Third-Party Risk Management (TPRM), and vendor management to implement PQC questionnaires, CBOM requests, contract language, supplier roadmap tracking, risk acceptance, and executive escalation for vendors and Software as a Service (SaaS) providers.\nProvide senior technical escalation and hands-on leadership for cryptographic standards exceptions, scan findings, false-positive triage, certificate outages, key and secret configuration issues, tool integration blockers, design tradeoffs, Steal-Now-Decrypt-Later (SNDL) exposure, identity and certificate risks, outdated TLS and cipher configurations, legacy cryptography, untracked keys, manual certificate processes, Operational Technology (OT) and manufacturing scope definition, developer and stakeholder enablement, and changes in National Institute of Standards and Technology (NIST), Internet Engineering Task Force (IETF), National Security Agency Commercial National Security Algorithm (NSA/CNSA) Suite, International Organization for Standardization (ISO), Health Insurance Portability and Accountability Act (HIPAA), Health Information Trust Alliance (HITRUST), and industry cryptography guidance.\nBasic Qualifications and Experience:\nDoctorate degree and 2 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience OR\nMaster's degree with 8 to 10 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience OR\nBachelor's degree with 10 to 14 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience OR\nDiploma with 14 to 18 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience\nFunctional Skills:\nMust-Have Skills:\nExpert knowledge of enterprise cryptography, including PKI, X.509 certificates, TLS, cipher suites, KMS/HSM, secrets management, key lifecycle, encryption at rest and in transit, and cloud key services.\nProven experience leading global information security, security architecture, or cryptography programs, including roadmap ownership, team management, resource planning, metrics, reporting, and executive stakeholder management.\nPractical knowledge of post-quantum cryptography, crypto agility, NIST-approved algorithms and standards, hybrid/PQC transition patterns, cryptographic discovery, and CBOM-driven remediation.\nAbility to translate security policy into enforceable controls across CI/CD, cloud platforms, identity, PKI/certificates, infrastructure, applications, third-party governance, and risk management.\nGood-to-Have Skills:\nHands-on experience with ServiceNow CMDB/GRC, Guard, Wiz, Qualys, Fortinet, Netskope, CrowdStrike, GitLab, Veracode, AWS KMS/ACM/Secrets Manager, Microsoft PKI, Sectigo, HashiCorp Vault, HSMs, CLM, and SIEM/data lake integrations.\nExperience designing or operating CBOM/SBOM data models using CycloneDX 1.6+, APIs, CSV/JSON exports, dashboards, and data quality controls.\nExperience coordinating PKI and certificate operations with DIAS or equivalent infrastructure and certificate service owners.\nExperience in validated/GxP, manufacturing, OT, KCS, or highly regulated environments, including change control and revalidation impacts.\nExperience with vendor and third-party risk management, supplier cryptographic questionnaires, contract requirements, and vendor roadmap tracking.\nScripting and automation experience with Python, PowerShell, Bash, REST APIs, or data pipeline tooling.\nProfessional Certifications:\nCISSP (required)\nCISM, CISA, or CRISC (preferred)\nCCSP or cloud security certification such as AWS Certified Security - Specialty or Azure Security Engineer (preferred)\nTOGAF or SABSA (preferred)\nITIL, SAFe, product management, or program management certification (preferred)\nRelevant PKI, KMS, HSM, cryptographic discovery, or certificate lifecycle management vendor certifications (preferred)\nSoft Skills:\nExcellent people leadership, coaching, mentoring, and performance management skills.\nStrong executive presence and ability to translate complex cryptographic risk into clear business impact and action plans.\nStrong verbal and written communication skills for technical, business, legal, procurement, compliance, and executive audiences.\nAbility to influence without direct authority across global security, DTI, DIAS, procurement, legal, compliance, OT, infrastructure, and application teams.\nHigh degree of initiative, accountability, judgment, and self-motivation in ambiguous or evolving technical domains.\nAbility to manage multiple priorities, competing stakeholder needs, and long-running transformation roadmaps successfully.\nTeam oriented, with a focus on shared outcomes, practical implementation, and service maturity.\nAbility to balance hands-on technical analysis with service ownership, people leadership, and enterprise change management.\nEQUAL OPPORTUNITY STATEMENT\nAmgen is an Equal Opportunity employer and will consider you without regard to your race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.\nWe will ensure that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.\n.","description_format":"text","description_chars":11425,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Prescription Drugs","Digital Signature","Immunology & Inflammation Therapeutics","Cardiometabolic Therapeutics"],"lifecycle":[{"event":"open","at":"2026-09-06T05:38:59Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.433,"p_room":0.28,"age_days":102,"expected_fill_days":43,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/amgen-encryption-agility-service-lead","json_url":"https://alion.io/job/amgen-encryption-agility-service-lead.json","meta":{"generated_at":"2026-10-31T16:27:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25694,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4775},"rest":"https://alion.io/mcp/rest/get_company?id=4775"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famgen-encryption-agility-service-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famgen-encryption-agility-service-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famgen-encryption-agility-service-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amgen-encryption-agility-service-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famgen-encryption-agility-service-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":429462}},{"tool":"search_jobs","arguments":{"company":"amgen.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":429462},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}