Senior Manager, Security Development & Engineering Senior

Your opportunity

At Charles Schwab, our purpose is simple: we champion client’s goals with passion and integrity. Guided by honesty, mutual respect and a commitment to doing what’s right, we bring innovation, education, and service together to help shape financial futures. Our people are the foundation of our success - they approach their work with curiosity and collaboration, coming together to create solutions that make a meaningful impact for clients and communities. As we expand into India, we are bringing this same culture of inclusion, learning, and opportunity to new talent. Joining us means becoming part of a global team where your work matters and your future can take shape.

Our Hyderabad location is central to Schwab’s growth, bringing together talented people and technology to drive innovation, scale and efficiency. Here, you will work alongside teams who create solutions that support millions of clients every day. The work you do is more than daily operations - it’s a chance to experiment, learn, and build within a values-driven, supportive environment. This is a unique opportunity to be part of our early growth phase and shape something new, backed by the stability and strength of a Fortune 500 company. Your impact begins on day one, and your contributions will help define our future in the region.

The Senior PKI Platform Security Engineer will help design, build, automate, and support Schwab’s next-generation Public Key Infrastructure platform. This role is focused on modernizing certificate lifecycle management, Certificate Authority services, Hardware Security Module integrations, trust services, monitoring, and related automation capabilities across the enterprise. The engineer will partner closely with U.S.-based PKI architecture, security, infrastructure, DevOps, cloud, and application teams to deliver scalable, resilient, and automation-first security services. This is a senior engineering opportunity for someone who wants to help shape a high-impact platform, reduce operational risk, and enable secure application onboarding at enterprise scale.

What you have

Key Responsibilities

• Design, develop, and support automation capabilities for certificate lifecycle management, PKI operations, Certificate Authority services, Hardware Security Module integrations, trust services, and platform monitoring.
• Build and maintain APIs, scripts, workflows, integrations, and observability capabilities that improve certificate visibility, provisioning, renewal, revocation, compliance, and operational resilience.
• Partner with U.S. PKI architecture, security engineering, infrastructure, cloud, DevOps, and application teams to support secure onboarding and adoption of standardized PKI services.
• Contribute to modernization of Schwab’s PKI platform, including automation patterns, operating procedures, monitoring standards, resiliency controls, documentation, and engineering best practices.
• Troubleshoot complex PKI, certificate, cryptographic, HSM, authentication, and trust-related issues across enterprise applications and infrastructure.
• Provide senior technical guidance, mentor engineers, and help influence implementation patterns that reduce operational risk and improve service reliability.

Required Experience

• 12+ years of experience in security engineering, infrastructure engineering, PKI engineering, cryptography, software engineering, or a related technology role.
• Hands-on experience with Public Key Infrastructure, Certificate Authorities, certificate lifecycle management, TLS/SSL certificates, key management, certificate chains, and enterprise trust stores.
• Experience with Hardware Security Modules or cryptographic key management platforms.
• Strong scripting or software engineering experience using Python, PowerShell, Java, Go, or similar programming languages.
• Experience building or supporting automation, APIs, integrations, monitoring, and operational workflows in an enterprise environment.
• Working knowledge of cryptographic concepts, revocation, OCSP, CRL, mTLS, key protection, secure certificate deployment, and certificate troubleshooting.
• Ability to work across global teams and communicate technical concepts clearly to engineering, architecture, operations, and security stakeholders.

Preferred Experience

• Experience with Venafi, CyberArk Certificate Manager / Trust Protection Platform, DigiCert, Microsoft ADCS, EJBCA, or similar PKI and certificate management platforms.
• Experience with Thales, Entrust, Utimaco, AWS CloudHSM, Azure Key Vault Managed HSM, or similar HSM and key management technologies.
• Experience with DevOps platforms, CI/CD pipelines, containers, Kubernetes, cloud platforms, infrastructure-as-code, or automated deployment patterns.
• Experience designing or supporting highly available security platforms in regulated financial services or large enterprise environments.
• Experience with monitoring and observability tools, including certificate discovery, expiration alerting, service health monitoring, dashboards, and operational reporting.
• Familiarity with compliance, audit, risk management, and security control expectations related to PKI, cryptography, and certificate lifecycle management.

What’s in it for you

At Schwab India, you’re empowered to shape your future. We support your growth through meaningful work, continuous learning, and a culture rooted in trust and collaboration - so you can build the skills to make a lasting impact. Our benefits are designed to care for your wellbeing, your family, and your long-term financial security.

Our base benefits, wellbeing, and total rewards include:

• Competitive compensation and retirement programs including Employee Provident Fund (EPF), Gratuity, and optional National Pension System (NPS) contributions
• Robust Paid Time Off, including annual/privilege leave, sick and casual leave, public holidays, maternity/paternity leave, and more
• Comprehensive medical insurance with Outpatient Department (OPD) services, including vaccination, pharmacy, dental, and vision coverage
• Annual reimbursement for health check-ups and mental health support through our Employee Assistance Program (EAP)
• Childcare (creche) reimbursement for eligible employees
• Transportation and meal benefits that support your day-to-day work
• Group life, personal accident, and critical illness insurance