Security Engineer - Cryptographic Engineer for Post Quantum Cryptography

Post-quantum cryptography security work with PNC’s Technology organization. In this onsite role in Lakewood, CO, you will help advance cryptographic engineering across the enterprise, supporting cryptographic lifecycle management, key control processes, PKI and tokenization, and compliance needs for evolving quantum-safe requirements.

This position is part of PNC’s broader technology footprint, with focus areas across enterprise solutions and locations including Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX; Denver, CO; and Phoenix, AZ.

Responsibilities

• Provide subject matter expertise when applying security concepts, designing, building, and maintaining technology solutions, including deliverables aligned to project timelines.
• Partner with architecture to translate high level designs into implementation specifics, including sizing and integration details, as well as onboarding and operationalization.
• Evaluate patches, updates, and ongoing maintenance activities, assessing impacts to existing solutions when new standards are introduced and ensuring alignment through change control and governance processes.
• Create and apply detailed implementation, configuration, design, and engineering documentation, including building and implementing cryptographic solutions.
• Work with operational partners to enable transition and day to day supportability.
• Provide engineering support for production environments, collaborating with other groups as needed, and expanding a broad knowledge base while maintaining focused expertise.

Key Requirements

• Experience with an enterprise centralized cryptographic program.
• Cryptographic lifecycle management with secure environments, key ceremonies, and chain of custody controls.
• Key management solutions across cloud and data platforms including AWS, Azure, MSSQL, Oracle, Linux, MongoDB, Pure, and Neo4j.
• PKI knowledge, including certificate lifecycle management, issuance, renewal, and troubleshooting.
• Application layer protection technologies and tokenization strategies.
• Cryptographic inventory awareness and integration across platforms to support enterprise visibility.
• Familiarity with cryptographic agility principles, post-quantum tooling, and quantum-safe technologies.
• Advanced understanding of cryptographic solutions for strategic planning, including the impact of quantum computing on enterprise security.
• Hands on experience with cryptographic platforms and tooling, including Oracle Key Manager and Thales CipherTrust Manager.
• Experience with HSMs including Thales, SWIFT, and Entrust.
• Exposure to PKI and certificate management tools such as Venafi and Microsoft ADCS.
• Tokenization experience with Protegrity.
• Cryptographic inventory tooling, including AgileSec Analytics.
• Proficiency with enterprise standard tools and workflow/collaboration platforms such as Jira, Confluence, SharePoint, and ServiceNow.
• Data visualization and reporting capabilities to support reporting, dashboarding, and analytics (openSearch preferred).
• Knowledge of PCI standards and FIPS requirements, including validation, plus guidance from NIST for current and emerging standards.
• Familiarity with industry guidance and collaboration bodies related to PQC roadmap development and migration planning, including G7, FS-ISAC, FSSCC, and CNSA.
• Ability to complete both initiatives and business as usual (BAU) activities.
• Strong analytical and problem-solving skills, with high precision in implementing and validating cryptographic controls and processes.
• Capability to translate complex technical concepts for non-technical stakeholders and collaborate across teams.
• Produce clear, concise professional documentation, including policies, procedures, technical designs, and executive-level materials.
• Define and track metrics and key risk indicators (KRIs) to measure control effectiveness and program maturity.
• Certifications in cryptographic technologies or EC Council’s Certified Encryption Specialist (if applicable).
• Participation in cryptographic working groups or standards bodies (examples listed: FS-SIAC, X9, PKI Consortium).

Education & Experience: Roles at this level typically require a university or college degree, with 5+ years of industry-relevant experience. This role specifies a Bachelors as the minimum education.

Technologies You May Work With

AWS, Azure, MSSQL, Oracle, Linux, MongoDB, Pure, Neo4j, PKI, Oracle Key Manager, Thales CipherTrust Manager, Thales, SWIFT, Entrust, Venafi, Microsoft ADCS, Protegrity, AgileSec Analytics, Jira, Confluence, SharePoint, ServiceNow, OpenSearch, PCI standards, FIPS, NIST cryptographic guidance, G7, FS-ISAC, FSSCC, CNSA.

Benefits

• Medical/prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long-term disability protection
• 401(k) with PNC match
• Pension
• Stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• Between 15 to 25 vacation days each year, depending on career level
• Depending on eligibility: back-up child/elder care

To learn more about these and other programs, including benefits for full time and part-time employees, visit pncthrive.com.

Compensation

Base Salary: $91,000.00 to $185,900.00 per year. Salaries may vary based on geographic location, market data, and individual skills, experience, and education. This role is incentive eligible, with payment based upon company, business, and/or individual performance.

Application Window

Generally expected to be posted for two business days from 06/04/2026, though it may be longer with business discretion.

Equal Employment Opportunity

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law. This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.

Disability Accommodations

If an accommodation is required to participate in the application process, contact [email protected]. Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance. All information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.

California Residents

Refer to the California Consumer Privacy Act Privacy Notice to gain understanding of how PNC may use or disclose your personal information in our hiring practices.