Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Lead Security Engineer Cryptographic Services

SECU174 open roles

Where
Operations - Raleigh - Creedmoor Rd
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead Security Engineer Cryptographic ServicesSECU · Operations - Raleigh - Creedmoor Rd

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SECU's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.2% of postings close within 7 days. Measured by our own scanner across the market. SECU postings stay open a median of 29 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.8%3 days
  3. 8.2%7 days
  4. 15.2%14 days
  5. 34.2%30 days
This job: posted yesterday

SECU median: 29 days open

The posting

If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!

Position Overview:

North Carolina State Employees Credit Union is seeking a Lead Cryptographic Engineer to join its Data Protection team. This role owns the design, operation, and continuous improvement of the credit union's cryptographic infrastructure, ensuring the confidentiality, integrity, and availability of cryptographic services that protect member and enterprise data. The Lead Cryptographic Engineer will serve as a subject matter expert on certificate lifecycle management, key management, and emerging cryptographic standards, partnering closely with Security, Infrastructure, and Compliance teams.

Essential Responsibilities:

  • Design and operate key management services across cloud KMS platforms and on-premises HSMs, including key hierarchies, rotation schedules, separation of duties, and BYOK/HYOK arrangements where customer commitments require them.
  • Plan and execute key generation and signing ceremonies under split knowledge and dual control, with auditable evidence and witnessed procedures.
  • Design, operate, and maintain enterprise Cryptographic infrastructure, including Microsoft Active Directory Certificate Services (ADCS) and integrated certificate lifecycle management platforms such as Venafi and DigiCert.
  • Own the enterprise PKI end to end: offline root, issuing CA hierarchy, HSM-backed key material, CP/CPS documentation, and the operational runbooks that support them.
  • Lead certificate lifecycle automation efforts, reducing manual issuance, renewal, and revocation processes across the enterprise.
  • Ensure PKI operations and certificate issuance practices remain compliant with CA/Browser Forum baseline requirements and applicable industry standards.
  • Evaluate, plan, and support the organization's transition to post-quantum cryptography (PQC), including algorithm agility and migration roadmaps.
  • Develop and maintain cryptographic policies, standards, certificate practice statements, and operational runbooks. Set standards for envelope encryption, tokenization, field-level encryption, and data-at-rest and in-transit protection.
  • Build and maintain a cryptographic bill of materials (CBOM) covering algorithms, libraries, and dependencies across the estate.
  • Partner with Security Engineering, Infrastructure, and Compliance teams to support audits, risk assessments, and incident response involving cryptographic assets.
  • Mentor junior engineers and contribute to the Data Protection team's technical roadmap.

Required Education & Experience (Knowledge, Skills, & Abilities):

  • 7+ years of experience in information security, with a focus on public key infrastructure and cryptographic systems.
  • Demonstrated ownership of a production PKI, including CA hierarchy design and HSM operations (Thales, Entrust nShield, AWS CloudHSM, or equivalent).
  • Hands-on experience with Venafi, Cyberark, DigiCert, Microsoft ADCS or other Cryptographic related tooling in a production enterprise environment.
  • Working knowledge of HSMs, certificate lifecycle automation tooling, and CA/Browser Forum compliance requirements.
  • Practical automation skills in Python, Go, or a comparable language, and comfort working with APIs, infrastructure as code, and CI/CD systems.
  • Familiarity with post-quantum cryptography concepts and emerging NIST standards.
  • Strong understanding of cryptographic protocols (TLS, S/MIME, code signing) and key management best practices.
  • Experience operating cryptographic services in a major cloud environment (AWS, Azure, or GCP) at scale.
  • Excellent written and verbal communication skills, with the ability to advise technical and non-technical stakeholders.

Preferred Education & Experience (Knowledge, Skills, & Abilities):

  • Associates, Bachelors, or advanced degree in IT Security or related field
  • Experience in financial services or another highly regulated industry
  • Security certifications such as Security+, GIAC, or CISSP
  • Familiarity with building dashboards or metrics reporting for security programs

SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.

Disclaimer

State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SECU's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SECU's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SECU's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.