Cryptographic Engineer

About the role

3M is seeking a Cryptographic Engineer to join its global security team. In this role you will manage encryption keys, digital certificates, and public‑key infrastructure across cloud and on‑premise environments, ensuring secure and reliable operations for internal and external customers.

Key responsibilities

• Troubleshoot operational issues related to encryption key and certificate services.
• Provide on‑call support for client requests involving encryption keys and digital certificates.
• Administer AWS‑hosted platforms for centralized storage, issuance, revocation, patching, vulnerability management, backups, and data migrations.
• Manage the Enterprise Secure Key Lifecycle (ESKM) platform from Utimaco.
• Manage the CipherTrust Manager (CTM) platform from Thales.
• Operate the Active Directory Certificate Services (ADCS) PKI, including certificate authorities and device enrollment.
• Oversee the Venafi platform for certificate lifecycle management.
• Partner with cloud engineering teams to support Amazon Certificate Manager (ACM), AWS Key Management Service (KMS) and Azure Key Vault.
• Collaborate with IT and security teams to ensure compliance with security policies and best practices.

Required profile

• High school diploma with 8 years or bachelor’s degree with 6 years of experience in IT, computer science, engineering or information security.
• Experience in private, public, government or military environments.
• Proven hands‑on experience managing encryption and PKI platforms.

Required skills

• AWS cloud services
• Enterprise Secure Key Lifecycle (ESKM)
• CipherTrust Manager (CTM)
• Active Directory Certificate Services (ADCS)
• Public Key Infrastructure (PKI)
• Venafi certificate management
• Amazon Certificate Manager (ACM)
• AWS Key Management Service (KMS)
• Azure Key Vault