Encryption Agility Engineer

Job description

Career CategoryInformation SystemsJob DescriptionRole Name: Specialist Information Security - Encryption Agility Engineer Job Posting Title: Specialist Information Security - Encryption Agility Engineer Department Name: Trusted Core Technologies ABOUT AMGEN Amgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver innovative medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what's known today. ABOUT THE ROLE Role Description: The Specialist Information Security - Encryption Agility Engineer will serve as a senior hands-on engineer for Amgen's enterprise Encryption Agility Service for Post-Quantum Cryptography (PQC) Readiness Preparation. This role supports the Senior Manager Information Security - Encryption Agility Service Lead and the Senior Specialist Information Security - Encryption Agility Team Architect by executing the technical work needed to build and operate Amgen's enterprise cryptographic inventory, discovery workflows, Cryptographic Bill of Materials (CBOM), remediation tracking, and engineering guidance for encryption, cryptography, crypto agility, and post-quantum readiness. The role is expected to be practical, technical, and service-oriented, with the ability to analyze cryptographic findings across applications, cloud, infrastructure, identity, Public Key Infrastructure (PKI), certificates, Key Management Services (KMS), secrets, data protection, Software as a Service (SaaS), and third-party ecosystems. This position will translate architecture direction into working implementation tasks, data quality rules, dashboards, tool integrations, remediation tickets, secure patterns, developer guidance, and repeatable Standard Operating Procedures (SOPs). The engineer will partner with Digital Identity Access Service (DIAS), PKI and certificate service owners, Application Security, Artificial Intelligence (AI) Security, Enterprise Architecture, cloud, infrastructure, platform, Risk and Compliance, Procurement, Legal, Third Party Risk Management (TPRM), Operational Technology (OT), and vendor teams to help make Amgen's PQC roadmap measurable, actionable, and sustainable. The role is also expected to identify high-volume, human-intensive Encryption Agility Service processes and design Artificial Intelligence (AI)-enabled orchestration patterns that reduce manual work, improve analysis speed, increase team throughput, and strengthen service consistency. This includes the ability to architect AI agents or coordinated teams of AI agents that support cryptographic inventory analysis, Cryptographic Bill of Materials (CBOM) data quality, remediation tracking, reporting, evidence review, and governance workflows while maintaining human-in-the-loop decision points for risk acceptance, exception handling, production change decisions, and other activities requiring accountable human judgment. Roles & Responsibilities: Execute assigned Encryption Agility Service workstreams, including intake analysis, backlog execution, roadmap tracking, service metrics, reporting inputs, SOP updates, and service improvement actions under the direction of the Senior Manager and Principal Architect. Operate enterprise cryptographic discovery across source code, binaries, cloud key services, endpoints, file systems, network traffic, PKI and certificates, KMS and secrets, vendor attestations, Software Bill of Materials (SBOM) inputs, and Subject Matter Expert (SME) interviews. Build, maintain, and improve the Amgen CBOM using CycloneDX 1.6+ as the target format, including required fields, source systems, ownership attributes, quantum-vulnerability status, remediation status, data quality checks, reporting views, and asset correlation. Support tool integration and data normalization across Amgen Enterprise and cryptographic discovery platforms. Analyze cryptographic scan outputs, source code findings, certificate chains, cipher suite configurations, Transport Layer Security (TLS) settings, Secure Shell (SSH) settings, Open Authorization (OAuth), Security Assertion Markup Language (SAML), JSON Web Token (JWT) patterns, cloud key configurations, and key or secret storage patterns. Implement and document remediation patterns approved by the Principal Architect, including hybrid TLS, proxy-based crypto agility, Network encapsulation, Internet Protocol Security (IPsec), Media Access Control Security (MACsec), Key Management Interoperability Protocol (KMIP), Public-Key Cryptography Standard #11 (PKCS#11), provider libraries, custom code libraries, symmetric cryptography, Hash-Based Message Authentication Code (HMAC), TLS termination, reverse proxies, encrypted overlays, segmentation controls, compensating controls, and risk-based replacement or decommission pathways. Coordinate with Digital Identity Access Service (DIAS), Public Key Infrastructure (PKI) service owners, certificate management teams, identity teams, cloud, infrastructure, and platform teams on certificate visibility, Certificate Lifecycle Manager (CLM) evaluation, certificate rotation, manual-to-automated deployment migration, post-quantum PKI readiness, hybrid certificate testing, Certificate Authority (CA) modernization, KMS strategy, Hardware Security Module (HSM) patterns, secrets management, key rotation, key retirement, storage standards, ownership, reporting, and centralized or federated control options. Partner with Application Security, Artificial Intelligence (AI) Security, Enterprise Architecture, Development and Operations (DevOps), and engineering teams to publish approved cryptographic libraries, secure code examples, reusable patterns, Continuous Integration/Continuous Delivery (CI/CD) controls, Secure Software Development Life Cycle (SSDLC) requirements, scanning rules, developer remediation playbooks, and practical implementation guidance. Apply Amgen's approved quantum risk-prioritization approach to discovery and remediation planning for business-critical applications, high-volume sensitive data flows, third-party dependencies, identity services, legacy platforms, Key Computerized Systems (KCS), validated Good x Practice (GxP) systems, and OT scope. Support vendor and third-party technical governance with Procurement, Legal, Risk and Compliance, Third Party Risk Management (TPRM), and business owners by preparing technical questionnaire content, CBOM requests, evidence reviews, roadmap tracking, contract language inputs, escalation triggers, and supplier remediation follow-up. Provide technical escalation and mentoring for Global Career Framework level 4 (L4) analysts and contributors, maintain cryptographic knowledge articles and implementation guides, and track changes in National Institute of Standards and Technology (NIST), Internet Engineering Task Force (IETF), National Security Agency Commercial National Security Algorithm Suite 2.0 (NSA CNSA 2.0), International Organization for Standardization (ISO), Health Insurance Portability and Accountability Act (HIPAA), Health Information Trust Alliance (HITRUST), and broader industry cryptography guidance. Design, implement, and govern Artificial Intelligence (AI)-enabled process orchestration for human-intensive Encryption Agility Service workflows, including cryptographic inventory analysis, Cryptographic Bill of Materials (CBOM) data normalization, scan output review, evidence collection, remediation tracking, reporting, and governance workflows; architect AI agents or coordinated teams of AI agents for data ingestion, finding correlation, false-positive triage support, ownership enrichment, remediation recommendation drafting, dashboard preparation, and knowledge article generation, while ensuring human-in-the-loop controls for risk decisions, exc