{"id":2090618,"url":"https://alion.io/job/state-employees-credit-union-lead-security-engineer-cryptographic-services","title":"Lead Security Engineer Cryptographic Services","company":{"id":1795048,"name":"State Employees' Credit Union","domain":"ncsecu.org","url":"https://alion.io/company/ncsecu-org","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":16,"ghost_share":0,"stale_share":0.938,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Raleigh, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":116000,"max_usd":238000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-10-08T14:24:23Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-11-03T07:44:16Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":25},"description":"If you are motivated and believe in the credit union philosophy of \"People Helping People,\" join our team!\nPosition Overview:\nNorth Carolina State Employees Credit Union is seeking a Lead Cryptographic Engineer to join its Data Protection team. This role owns the design, operation, and continuous improvement of the credit union's cryptographic infrastructure, ensuring the confidentiality, integrity, and availability of cryptographic services that protect member and enterprise data. The Lead Cryptographic Engineer will serve as a subject matter expert on certificate lifecycle management, key management, and emerging cryptographic standards, partnering closely with Security, Infrastructure, and Compliance teams.\nEssential Responsibilities:\nDesign and operate key management services across cloud KMS platforms and on-premises HSMs, including key hierarchies, rotation schedules, separation of duties, and BYOK/HYOK arrangements where customer commitments require them.\nPlan and execute key generation and signing ceremonies under split knowledge and dual control, with auditable evidence and witnessed procedures.\nDesign, operate, and maintain enterprise Cryptographic infrastructure, including Microsoft Active Directory Certificate Services (ADCS) and integrated certificate lifecycle management platforms such as Venafi and DigiCert.\nOwn the enterprise PKI end to end: offline root, issuing CA hierarchy, HSM-backed key material, CP/CPS documentation, and the operational runbooks that support them.\nLead certificate lifecycle automation efforts, reducing manual issuance, renewal, and revocation processes across the enterprise.\nEnsure PKI operations and certificate issuance practices remain compliant with CA/Browser Forum baseline requirements and applicable industry standards.\nEvaluate, plan, and support the organization's transition to post-quantum cryptography (PQC), including algorithm agility and migration roadmaps.\nDevelop and maintain cryptographic policies, standards, certificate practice statements, and operational runbooks. Set standards for envelope encryption, tokenization, field-level encryption, and data-at-rest and in-transit protection.\nBuild and maintain a cryptographic bill of materials (CBOM) covering algorithms, libraries, and dependencies across the estate.\nPartner with Security Engineering, Infrastructure, and Compliance teams to support audits, risk assessments, and incident response involving cryptographic assets.\nMentor junior engineers and contribute to the Data Protection team's technical roadmap.\nRequired Education & Experience (Knowledge, Skills, & Abilities):\n 7+ years of experience in information security, with a focus on public key infrastructure and cryptographic systems.\nDemonstrated ownership of a production PKI, including CA hierarchy design and HSM operations (Thales, Entrust nShield, AWS CloudHSM, or equivalent).\nHands-on experience with Venafi, Cyberark, DigiCert, Microsoft ADCS or other Cryptographic related tooling in a production enterprise environment.\nWorking knowledge of HSMs, certificate lifecycle automation tooling, and CA/Browser Forum compliance requirements.\nPractical automation skills in Python, Go, or a comparable language, and comfort working with APIs, infrastructure as code, and CI/CD systems.\nFamiliarity with post-quantum cryptography concepts and emerging NIST standards.\nStrong understanding of cryptographic protocols (TLS, S/MIME, code signing) and key management best practices.\nExperience operating cryptographic services in a major cloud environment (AWS, Azure, or GCP) at scale.\nExcellent written and verbal communication skills, with the ability to advise technical and non-technical stakeholders.\nPreferred Education & Experience (Knowledge, Skills, & Abilities):\nAssociates, Bachelors, or advanced degree in IT Security or related field\nExperience in financial services or another highly regulated industry\nSecurity certifications such as Security+, GIAC, or CISSP\nFamiliarity with building dashboards or metrics reporting for security programs\nSECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.\nDisclaimer\nState Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.","description_format":"text","description_chars":4443,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Credit Unions & Cooperative Banks"],"lifecycle":[{"event":"open","at":"2026-10-08T14:24:23Z"}],"visa":[],"liveness":{"score":46,"band":"ok","label":"Likely open","p_open":1,"p_active":0.615,"p_room":0.75,"age_days":25,"expected_fill_days":31,"reasons":["conf:7","stale_co","velocity","win:late"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/state-employees-credit-union-lead-security-engineer-cryptographic-services","json_url":"https://alion.io/job/state-employees-credit-union-lead-security-engineer-cryptographic-services.json","meta":{"generated_at":"2026-11-03T07:47:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11163,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1795048},"rest":"https://alion.io/mcp/rest/get_company?id=1795048"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstate-employees-credit-union-lead-security-engineer-cryptographic-services"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstate-employees-credit-union-lead-security-engineer-cryptographic-services"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstate-employees-credit-union-lead-security-engineer-cryptographic-services"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/state-employees-credit-union-lead-security-engineer-cryptographic-services\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstate-employees-credit-union-lead-security-engineer-cryptographic-services"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2090618}},{"tool":"search_jobs","arguments":{"company":"ncsecu.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2090618},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}