Security Engineer - Cryptographic Engineer for Post Quantum Cryptography

The Security Engineer role supports PNC’s Technology organization with cryptographic and post-quantum cryptography capabilities. The work includes designing, building, and maintaining cryptographic security solutions such as PKI, key management, tokenization, and supporting tooling across enterprise platforms.

Location

• Farmers Branch, TX (onsite)

Compensation

• Base salary: USD 91,000 - 185,900 per year
• Compensation may vary based on geographic location, market data, and on individual skills, experience, and education.
• This role is incentive eligible with payment based upon company, business and/or individual performance.

Role Overview

As a Security Engineer within PNC’s Technology organization, you will be based in one of the following locations: Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX; Denver, CO; or Phoenix, AZ.

Responsibilities

• Provide subject matter expertise to apply security concepts by leveraging technical knowledge and industry experience to design, build, and maintain technology solutions, including deliverables tied to project timelines.
• Partner with architecture to translate high-level designs into implementation specifics, including areas such as sizing, integration details, onboarding, and operationalization.
• Evaluate patches, updates, and ongoing maintenance activities; determine the impacts to existing solutions when new standards are implemented, using change control and governance processes to ensure alignment.
• Create detailed implementation, configuration, design, and engineering documentation while building and implementing solutions.
• Work with operational partners to support transitions and day-to-day operational supportability.
• Provide engineering support for production technology environments and collaborate with other groups as required, while seeking opportunities to expand broader knowledge beyond specific subject matter expertise.

Required Qualifications

• Experience with an enterprise centralized cryptographic program.
• Knowledge of cryptographic lifecycle management, secure environments, key ceremonies, and chain of custody controls.
• Key management solutions across cloud and data platforms, including AWS, Azure, MSSQL, Oracle, Linux, MongoDB, Pure, and Neo4j.
• Public Key Infrastructure (PKI) experience, including certificate lifecycle management (issuance, renewal, and troubleshooting).
• Application layer protection technologies and tokenization strategies.
• Cryptographic inventory awareness and integration across platforms to support enterprise visibility.
• Familiarity with cryptographic agility principles, post-quantum tooling, and quantum-safe technologies.
• Advanced understanding of cryptographic solutions supporting strategic planning, including the impact of quantum computing on enterprise security.
• Hands-on experience with cryptographic platforms and tooling.
• Key management tools including Oracle Key Manager and Thales CipherTrust Manager.
• HSMs including Thales, SWIFT, and Entrust.
• PKI and certificate management tools including Venafi and Microsoft ADCS.
• Tokenization tools including Protegrity.
• Cryptographic inventory tools including AgileSec Analytics.
• Proficiency with enterprise standard tools, including workflow and collaboration platforms such as Jira, Confluence, SharePoint, and ServiceNow.
• Data visualization and reporting tools to support reporting, dashboarding, and analytics; OpenSearch is preferred.
• Knowledge of PCI standards and FIPS requirements, including validation, and alignment with FIPS and NIST cryptographic guidance for current and emerging standards.
• Participation in cryptographic working groups or standards bodies, including examples such as FS-SIAC, X9, PKI Consortium, and other related groups.
• Foundational understanding of cryptographic agility principles and application in enterprise environments.
• Familiarity with industry guidance and collaboration bodies related to PQC roadmap development and migration planning, including G7, FS-ISAC, FSSCC, and CNSA.
• Ability to deliver initiatives and BAU (business as usual) activities to completion.
• Strong analytical and problem-solving skills to identify and resolve complex issues.
• High precision in implementing and validating cryptographic controls and processes.
• Ability to translate complex technical concepts for non-technical stakeholders and collaborate across teams.
• Adaptability to evolving security threats, technologies, and cryptographic standards.
• Ability to produce clear, concise, and professional documentation including policies, procedures, technical designs, and executive-level materials.
• Forward-thinking mindset that considers long-term implications of solutions.
• Ability to define and track metrics and KRIs to measure control effectiveness and program maturity.
• Certifications in cryptographic technologies, including EC Council’s Certified Encryption Specialist.
• Typically requires a university/college degree and 5+ years of industry-relevant experience. In lieu of a degree, a comparable combination of education, job-specific certifications, and experience (including military service) may be considered.

Technologies

• AWS, Azure, MSSQL, Oracle, Linux, MongoDB, Pure, Neo4j
• PKI, Oracle Key Manager, Thales CipherTrust Manager, Thales, SWIFT, Entrust
• Venafi, Microsoft ADCS, Protegrity, AgileSec Analytics
• Jira, Confluence, SharePoint, ServiceNow, OpenSearch
• PCI standards, FIPS, NIST cryptographic guidance
• G7, FS-ISAC, FSSCC, CNSA, FDIA, SAFE Act, FINRA
• EC Council’s Certified Encryption Specialist

Benefits

• Medical/prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long-term disability protection
• 401(k) with PNC match
• Pension and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• 15 to 25 vacation days each year depending on career level and years of service
• Paid time off and other programs depending on eligibility (refer to pncthrive.com)

Employee Principles

• Customer Focused: Knowledgeable of values and practices aligned to customer needs and satisfaction as primary considerations, using that information to create customized customer solutions.
• Managing Risk: Assessing and effectively managing risks associated with business objectives and activities to support and adhere to PNC’s Enterprise Risk Management Framework.

Preferred Skills

• Access Control (AC)
• Building Architecture
• Cryptography
• Customer Solutions
• Disaster Recovery Planning
• Hardware Security Modules (HSM)
• Information Security
• Network Security
• Physical Security
• Public Key Infrastructure
• Quantum Cryptography
• Risk Assessments
• Security Technologies

Competencies

• Analytical Thinking
• Effective Communications
• Information Security Management
• Information Security Technologies
• IT Environment
• IT Standards, Procedures & Policies
• IT Systems Management
• Network and Internet Security
• Problem Solving
• Technical Troubleshooting

Application Window

Generally expected to be posted for two business days from 06/04/2026, although it may be longer with business discretion.

Disability Accommodations

• If an accommodation is required to participate in the application process, contact [email protected].
• Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance.

Equal Employment Opportunity (EEO)

• PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law.
• This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or FINRA, which prohibit the hiring of individuals with certain criminal history.

California Residents

Refer to the California Consumer Privacy Act Privacy Notice to understand how PNC may use or disclose personal information in hiring practices.