Cryptographic Engineer

Cryptographic Engineer managing encryption keys, PKI, certificates, and AWS security platforms at 3M. Supporting secure operations for a global science and manufacturing company.

Posted 8/19/2026full-timeMaplewood • Minnesota, Texas • 🇺🇸 United StatesSeniorLead💰 $109,202 - $133,469 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing encryption key services, digital certificates, and PKI platforms, with a strong focus on AWS and cloud security best practices. Proficient in troubleshooting and operational support for encryption tools while ensuring compliance with security policies.

Highest-signal resume keywords

AWS EngineeringEncryption Platform ManagementPKI AdministrationCryptographic PrinciplesCISSP or CISM Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Encryption Key ManagementDigital Certificate ManagementMicrosoft ADCS AdministrationPowerShell ScriptingPython ProgrammingUtimaco ESKM ManagementThales CipherTrust Manager ManagementVenafi ManagementAWS KMSAzure Key Vault

Tools & Technologies

AWSUtimaco ESKMThales CipherTrust ManagerMicrosoft ADCSVenafiACM

Certifications & Qualifications

CISSPCISM

Industry Keywords

Information TechnologyInformation SecurityCloud SecurityEnvironmental Health and SafetyCompliance

Tech Stack

Tools & technologies

AWSAzureCloudPythonVault

About the role

Key responsibilities & impact

Manage and maintain services related to encryption keys, digital certificates, remote key managers, and PKI
Troubleshoot operational issues for encryption key and certificate tools/services
Respond to client requests for encryption keys and digital certificates with on-call support
Manage AWS-hosted platforms for centralized storage, issuance, and revocation of encryption keys and digital certificates
Install, patch, upgrade, manage vulnerabilities, back up, build, and migrate data on hosted platforms
Manage the Utimaco ESKM platform
Manage the Thales CipherTrust Manager platform
Manage the Microsoft ADCS internal PKI platform, certificate authorities, and network device enrollment
Manage the Venafi certificate-management platform
Partner with cloud platform engineering teams on ACM, AWS KMS, and Azure Key Vault
Collaborate with IT and security teams to ensure compliance with security policies and best practices
Comply with corporate policies, procedures, and security standards
Contribute to 3M’s Environmental Health and Safety culture

Requirements

What you’ll need

High School Diploma and 8 years of experience in Information Technology, Computer Science, Engineering, or Information Security; OR Bachelor's degree or higher and 6 years of experience in those fields
Proven experience with AWS as an engineer or architect
Proven experience managing encryption platforms, including ESKM and CipherTrust Manager
Proven experience managing PKI and administering Microsoft ADCS
Proven experience with ACM, AWS KMS, and Azure Key Vault
Proven experience with Venafi
Strong understanding of cryptographic principles and digital certificate management
Relevant certifications such as CISSP or CISM
Experience with PowerShell or Python
Familiarity with cloud security best practices
Must be legally authorized to work in the country of employment without sponsorship for an employment visa

Benefits

Comp & perks

Medical, Dental & Vision
Health Savings Accounts
Health Care & Dependent Care Flexible Spending Accounts
Disability Benefits
Life Insurance
Voluntary Benefits
Paid Absences
Retirement Benefits
Variable incentive pay, if eligible
Relocation assistance is not authorized