About the Role
This role provides dedicated engineering ownership for enterprise SSH capabilities, including SSH Certificate Authority, key lifecycle management, and machine identity governance. The ideal candidate will lead the design and adoption of SSH CA capabilities, establish standards, and drive automation for SSH across the enterprise, aligning with broader machine identity and cryptographic services strategy.
Responsibilities
- Lead engineering and implementation of the enterprise SSH Certificate Authority capability.
- Define SSH certificate, SSH key lifecycle, trust and access patterns across the organization.
- Drive SSH key discovery, ownership mapping, remediation and lifecycle governance.
- Develop automation for SSH certificate issuance, rotation, revocation and reporting.
- Partner with infrastructure, Linux, cloud, privileged access and application teams to onboard SSH use cases.
- Align SSH capabilities with broader machine identity management, PKI and crypto operations strategies.
- Support vaults/secrets management integration points where SSH credentials or keys require stronger control.
- Define operational runbooks, monitoring requirements and escalation paths for SSH-related services.
- Support audit, risk and regulatory inquiries related to SSH controls and machine identities.
- Contribute to the long-term vision for centralized crypto operations support.
Requirements
- 7+ years of cybersecurity, infrastructure, Linux, identity, PKI or privileged access engineering experience.
- Strong understanding of SSH, SSH keys, SSH certificates, Linux/Unix access patterns and privileged access controls.
- Experience with certificate authorities, PKI concepts, machine identity management and secrets management platforms.
- Experience automating identity, access or infrastructure workflows using scripts, APIs or orchestration tools.
- Strong knowledge of enterprise risk, audit evidence, operational controls and security standards.
- Strong ability to influence across multiple technology teams and drive adoption of new security capabilities.
Skills
- SSH
- SSH keys
- SSH certificates
- Linux/Unix access patterns
- Privileged access controls
- Certificate authorities
- PKI concepts
- Machine identity management
- Secrets management platforms
- Automation
- Scripting
- APIs
- Orchestration tools
- Enterprise risk
- Audit evidence
- Operational controls
- Security standards
Location
- Primary location specified
Work Type
- Full-time
Experience Level
- Senior engineer
- 7+ years of experience
Salary/Compensations
- $120,000 - $202,500 Annual
Benefits
- Retirement savings plan (401K) with company match
- Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
- Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
- Access to Employee Assistance Program
- Incentive compensation including eligibility for annual performance-based awards
- Eligibility for certain tax advantaged savings plans
About the Company
- Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability.
- We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
- We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential.
- As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most.
- Join us in shaping the future.
Equal Opportunity
- As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
