The role is for a cybersecurity engineer focused on key management, encryption technologies, and hardware-backed security solutions within Fidelity's Digital Asset Security Operations team. This team is responsible for securing critical platforms that support cryptocurrency and blockchain services. The ideal candidate will work collaboratively with cybersecurity, risk, and development teams to implement secure key lifecycle management systems and encryption controls. The position requires a strong understanding of modern cryptographic systems and cloud-native architecture.

• Bachelor’s degree in Computer Science or a related technical discipline
• 6+ years of experience in distributed systems engineering, security engineering, or platform operations
• 2+ years of hands-on experience with Enterprise Key Management Systems (KMS)
• 2+ years of hands-on experience with encryption technologies including data-at-rest, data-in-transit, and data-in-use
• Experience with Hardware Security Modules (HSMs) for secure key generation, storage, and cryptographic operations
• 1–2 years of experience working with cloud-native environments, including AWS and Kubernetes
• Strong understanding of cryptographic principles including symmetric/asymmetric encryption and PKI concepts
• Experience securing and hardening Linux and Windows systems with a focus on encryption, identity, and access control
• Practical experience with containers, orchestration, CI/CD pipelines, and infrastructure as code
• Strong analytical and troubleshooting skills in complex distributed systems
• Experience working in Agile environments within large enterprises

• Contribute to the design and operation of secure cryptographic infrastructure supporting Fidelity’s digital asset and blockchain platforms
• Build, integrate, and maintain enterprise key management and encryption solutions using AWS-native services and HSM-backed security controls
• Support secure containerized applications running in Kubernetes by implementing secrets management and encryption enforcement
• Engineer and operate secure CI/CD pipelines to ensure trusted software delivery with integrated cryptographic controls
• Perform security engineering and operational support across distributed cloud environments, including on-call responsibilities and incident management
• Design and implement end-to-end encryption strategies for data protection across APIs, services, and storage layers
• Evaluate and prototype emerging technologies in confidential computing and advanced encryption mechanisms
• Define and enforce security controls and policies across systems, containers, and network layers

• Fidelity offers competitive compensation, annual bonuses, retirement contributions, comprehensive healthcare coverage, parental leave, tuition assistance, wellness programs, and extensive professional development opportunities.