Senior Engineer - Cryptographic Governance and Public Key Infrastructure

Senior Engineer - GBS IND

Job Description:

About us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations.

Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation.

In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

The Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. Cyber Security technology function is responsible of development and maintenance of security products across Bank of America. Team works on various security products and also develops in-house products.

Job Description:

This role is responsible for leading and supporting enterprise-wide governance efforts related to cryptographic technologies and Public Key Infrastructure (PKI). The specialist will serve as a subject matter expert in crypto governance, ensuring alignment with regulatory standards, internal policies, and risk management frameworks. Key responsibilities include defining governance models, managing crypto and PKI lifecycle processes, and partnering with engineering and compliance teams to ensure secure and compliant implementations. The candidate will interface with a lot of Enterprise teams and AIT owners in resolving their respective risks related to certificate management. We are driving automation in our areas, so technical skills towards automation will be needed

Responsibilities:

• Serve as SME for cryptographic governance and PKI lifecycle management.
• Define and maintain enterprise crypto and PKI governance frameworks, policies, and standards.
• Oversee key management processes including generation, rotation, archival, and destruction.
• Collaborate with engineering teams to ensure cryptographic implementations align with governance requirements.
• Lead efforts to assess and mitigate risks associated with cryptographic systems and PKI.
• Interface with internal audit, risk, and compliance teams to support assessments and regulatory reviews.
• Monitor and report on crypto and PKI compliance metrics and control effectiveness.
• Evaluate vendor solutions for crypto and PKI compliance and integration.
• Stay current with evolving cryptographic standards, including Post-Quantum Cryptography.
• Provide guidance and mentorship to technical teams on crypto governance best practices.

Requirements

• Education : B.E. / B. Tech/M.E. /M. Tech/M.Sc./MCA (prefer IT/CS specialization)
• Certifications (If Any) :NA
• Experience Range : 10+ Years

Foundational skills

• Strong understanding of cryptographic principles, PKI architecture, and key lifecycle management.
• Experience with governance frameworks and regulatory standards (e.g., NIST, ISO, PCI-DSS).
• Familiarity with TLS, SSH, and other secure communication protocols.
• Knowledge of Post-Quantum Cryptography and its governance implications.
• Experience with cloud-based key management and protection strategies.
• Excellent communication skills for engaging technical and non-technical stakeholders.
• Proven ability to manage risk and compliance deliverables in a complex environment.
• Experience supporting audit exams and risk assessments.
• Ability to work collaboratively across engineering, compliance, and vendor teams.
• Agile delivery experience preferred.
• Coding knowledge (includes scripting) and understanding of SDLC process, using API’s, developing small scale solutions with different databases.

Desired skills

• Governance and Compliance
• Risk Management
• Cryptographic Lifecycle Management
• PKI Architecture
• Stakeholder Engagement
• Technical Strategy Development
• Cybersecurity
• Critical Thinking
• Solution Design
• Vendor Management
• DevOps Practices
• Test Engineering
• Collaboration

Work Timings : 1:30 PM - 10:30 PM IST
Job Location : Hyderabad/Chennai

Experience Level

Senior Level