State Street
SSH & Machine Identity Engineer
United States · Work style not stated · Full time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerState Street
- LocationUnited States
- Work styleWork style not stated
- Employment typeFull time
- Employer posted
Who we are looking for
This role will provide dedicated engineering ownership for enterprise SSH capabilities, including the planned SSH Certificate Authority, SSH key lifecycle management, machine identity governance and automation across the organization. We are looking for a senior engineer who can lead the design and adoption of SSH CA capabilities and establish stronger ownership, standards and automation for SSH across the enterprise. The role should connect SSH governance with the broader machine identity and cryptographic services strategy.
What you will be responsible for
As a SSH & Machine Identity Engineer you will
- Lead engineering and implementation of the enterprise SSH Certificate Authority capability.
- Define SSH certificate, SSH key lifecycle, trust and access patterns across the organization.
- Drive SSH key discovery, ownership mapping, remediation and lifecycle governance.
- Develop automation for SSH certificate issuance, rotation, revocation and reporting.
- Partner with infrastructure, Linux, cloud, privileged access and application teams to onboard SSH use cases.
- Align SSH capabilities with broader machine identity management, PKI and crypto operations strategies.
- Support vaults/secrets management integration points where SSH credentials or keys require stronger control.
- Define operational runbooks, monitoring requirements and escalation paths for SSH-related services.
- Support audit, risk and regulatory inquiries related to SSH controls and machine identities.
- Contribute to the long-term vision for centralized crypto operations support.
Show full description
What we value
These skills will help you succeed in this role
- Strong ownership mindset with the ability to drive execution across multiple teams.
- Practical focus on risk reduction, operational simplification, automation and measurable outcomes.
- Ability to communicate clearly with technical teams, leadership, audit and risk stakeholders.
Education & Preferred Qualifications
- 7+ years of cybersecurity, infrastructure, Linux, identity, PKI or privileged access engineering experience.
- Strong understanding of SSH, SSH keys, SSH certificates, Linux/Unix access patterns and privileged access controls.
- Experience with certificate authorities, PKI concepts, machine identity management and secrets management platforms.
- Experience automating identity, access or infrastructure workflows using scripts, APIs or orchestration tools.
- Strong knowledge of enterprise risk, audit evidence, operational controls and security standards.
- Strong ability to influence across multiple technology teams and drive adoption of new security capabilities.
Salary Range:
$120,000 - $202,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
For a full overview, visit https://hrportal.ehr.com/statestreet/Home.
About State Street
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Discover more information on jobs at StateStreet.com/careers
Read our CEO Statement
Job Application Disclosure:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Employment typeFull time
- Employer posted
- Added to ROLIVA
- Last checked