Cybersecurity Engineer – PKI & Secrets Management

About the role

Join the PKI and Secrets Management team within Morgan Stanley’s Data Protection Services department. As a Cybersecurity Engineer you will design, implement and operate enterprise‑wide cryptographic solutions, ensuring the security and availability of key management and certificate services.

Key responsibilities

• Communicate with product leads to identify improvement opportunities for cryptographic technologies.
• Design, implement and maintain PKI, HSMs and certificate management platforms.
• Manage the full certificate lifecycle – issuance, renewal, revocation and deployment.
• Engineer and support secure key management, including generation, rotation and backup.
• Monitor and operate cryptographic services in a 24/7 environment with on‑call rotations.
• Automate certificate and key management processes to reduce manual effort.
• Collaborate with application, infrastructure and security teams to embed cryptographic controls in enterprise and cloud systems.
• Support evaluation and adoption of Post‑Quantum Cryptography and crypto‑agility strategies.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology or equivalent experience.
• 5+ years of hands‑on experience in cybersecurity engineering or operations with exposure to PKI, HSMs and certificate management.
• Ability to manage multiple initiatives and work effectively across teams.

Required skills

• PKI design and administration.
• Hardware Security Module (HSM) technologies and key management practices.
• Certificate lifecycle management tools.
• Strong understanding of cryptographic protocols and standards (TLS, X.509, key exchange, encryption algorithms).
• Automation and scripting using Python, PowerShell or similar languages.