Cybersecurity Engineer (PKI/HSM) - Director - Cybersecurity Engineering

Morgan Stanley · Bengaluru · 5+ yrs experience · Posted 2026-06-15

Tech stack: Python

Apply on the company site · Get a referral for this role

Morgan Stanley salary & ratings · Morgan Stanley interview process · More live openings

About the role

Responsibilities:
- in the role:
- Communicate regularly with product leads across the organization and discuss opportunities for improvement to existing and future technology solutions.
- Design, implement, and maintain enterprise cryptographic infrastructure, including PKI, HSMs, and certificate management platforms.
- Manage the full certificate lifecycle (issuance, renewal, revocation, and deployment) to ensure security, availability, and compliance.
- Engineer and support secure key management solutions leveraging HSMs, including key generation, storage, rotation, and backup.
- Monitor and operate cryptographic services in a 24/7 environment (on call rotations), ensuring high availability, incident response, and performance optimization.
- Automate certificate and key management processes to reduce manual effort and minimize operational risk.
- Collaborate with application, infrastructure, and security teams to integrate cryptographic controls into enterprise systems and cloud environments.
- Support the evaluation, design, and adoption of Post-Quantum Cryptography (PQC) capabilities, including PQC-enabled PKI environments, crypto-agility strategies and transition planning
- 5+ years of hands-on experience in cybersecurity engineering or operations, with exposure to cryptographic services (PKI, HSMs, certificate management).
- Ability to effectively manage multiple functions and initiatives.
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Strong understanding of cryptographic principles, protocols, and standards (e.g., TLS, X.509, key exchange, encryption algorithms).
- Proven experience managing PKI environments and certificate lifecycle tools in enterprise and/or cloud environments.
- Hands-on experience with HSM technologies and key management practices, including secure key generation, storage, rotation, and backup.
- Familiarity with automation and scripting (e.g., Python, PowerShell, or similar) to streamline certificate and key management processes.
- Knowledge of emerging cryptographic trends, including Post-Quantum Cryptography (PQC) and crypto-agility concepts; relevant certifications such as CISSP, CISM, or vendor-specific PKI/HSM certifications are
Qualifications:
- 5+ years of hands-on experience in cybersecurity engineering or operations, with exposure to cryptographic services (PKI, HSMs, certificate management).
- Ability to effectively manage multiple functions and initiatives.
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Strong understanding of cryptographic principles, protocols, and standards (e.g., TLS, X.509, key exchange, encryption algorithms).
- Proven experience managing PKI environments and certificate lifecycle tools in enterprise and/or cloud environments.
- Hands-on experience with HSM technologies and key management practices, including secure key generation, storage, rotation, and backup.
- Familiarity with automation and scripting (e.g., Python, PowerShell, or similar) to streamline certificate and key management processes.
- Knowledge of emerging cryptographic trends, including Post-Quantum Cryptography (PQC) and crypto-agility concepts; relevant certifications such as CISSP, CISM, or vendor-specific PKI/HSM certifications are preferred.

Qualifications

- 5+ years of hands-on experience in cybersecurity engineering or operations, with exposure to cryptographic services (PKI, HSMs, certificate management).
- Ability to effectively manage multiple functions and initiatives.
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Strong understanding of cryptographic principles, protocols, and standards (e.g., TLS, X.509, key exchange, encryption algorithms).
- Proven experience managing PKI environments and certificate lifecycle tools in enterprise and/or cloud environments.
- Hands-on experience with HSM technologies and key management practices, including secure key generation, storage, rotation, and backup.
- Familiarity with automation and scripting (e.g., Python, PowerShell, or similar) to streamline certificate and key management processes.
- Knowledge of emerging cryptographic trends, including Post-Quantum Cryptography (PQC) and crypto-agility concepts; relevant certifications such as CISSP, CISM, or vendor-specific PKI/HSM certifications are preferred.

Responsibilities

- in the role:
- Communicate regularly with product leads across the organization and discuss opportunities for improvement to existing and future technology solutions.
- Design, implement, and maintain enterprise cryptographic infrastructure, including PKI, HSMs, and certificate management platforms.
- Manage the full certificate lifecycle (issuance, renewal, revocation, and deployment) to ensure security, availability, and compliance.
- Engineer and support secure key management solutions leveraging HSMs, including key generation, storage, rotation, and backup.
- Monitor and operate cryptographic services in a 24/7 environment (on call rotations), ensuring high availability, incident response, and performance optimization.
- Automate certificate and key management processes to reduce manual effort and minimize operational risk.
- Collaborate with application, infrastructure, and security teams to integrate cryptographic controls into enterprise systems and cloud environments.
- Support the evaluation, design, and adoption of Post-Quantum Cryptography (PQC) capabilities, including PQC-enabled PKI environments, crypto-agility strategies and transition planning
- 5+ years of hands-on experience in cybersecurity engineering or operations, with exposure to cryptographic services (PKI, HSMs, certificate management).
- Ability to effectively manage multiple functions and initiatives.
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Strong understanding of cryptographic principles, protocols, and standards (e.g., TLS, X.509, key exchange, encryption algorithms).
- Proven experience managing PKI environments and certificate lifecycle tools in enterprise and/or cloud environments.
- Hands-on experience with HSM technologies and key management practices, including secure key generation, storage, rotation, and backup.
- Familiarity with automation and scripting (e.g., Python, PowerShell, or similar) to streamline certificate and key management processes.
- Knowledge of emerging cryptographic trends, including Post-Quantum Cryptography (PQC) and crypto-agility concepts; relevant certifications such as CISSP, CISM, or vendor-specific PKI/HSM certifications are

More openings at Morgan Stanley