About the Role :

The Specialist Information Security - Encryption Agility Engineer will serve as a senior hands-on engineer for Amgen's enterprise Encryption Agility Service for Post-Quantum Cryptography (PQC) Readiness Preparation. This role supports the execution of technical work needed to build and operate Amgen's enterprise cryptographic inventory, discovery workflows, Cryptographic Bill of Materials (CBOM), remediation tracking, and engineering guidance for encryption, cryptography, crypto agility, and post-quantum readiness.

Roles & Responsibilities :

- Execute assigned Encryption Agility Service workstreams, including intake analysis, backlog execution, roadmap tracking, service metrics, reporting inputs, SOP updates, and service improvement actions.
- Operate enterprise cryptographic discovery across source code, binaries, cloud key services, endpoints, file systems, network traffic, PKI and certificates, KMS and secrets, vendor attestations, and SBOM inputs.
- Build, maintain, and improve the Amgen CBOM using CycloneDX 1.6 as the target format, including required fields, source systems, ownership attributes, quantum-vulnerability status, remediation status, and asset correlation.
- Analyze cryptographic scan outputs, source code findings, certificate chains, cipher suite configurations, TLS, SSH, OAuth, SAML, JWT patterns, cloud key configurations, and key or secret storage patterns.
- Implement and document remediation patterns approved by the Principal Architect, including hybrid TLS, proxy-based crypto agility, Network encapsulation, IPsec, MACsec, KMIP, PKCS#11, provider libraries, and custom code libraries.
- Coordinate with DIAS, PKI service owners, and certificate management teams on certificate visibility, CLM evaluation, rotation, automation migration, post-quantum PKI readiness, and CA modernization.
- Partner with Application Security, AI Security,



Enterprise Architecture, DevOps, and engineering teams to publish approved cryptographic libraries, secure code examples, reusable patterns, CI/CD controls, and SSDLC requirements.
- Apply Amgen's approved quantum risk-prioritization approach to discovery and remediation planning for business-critical applications, high-volume sensitive data flows, third-party dependencies, and GxP systems.
- Support vendor and third-party technical governance by preparing technical questionnaire content, CBOM requests, evidence reviews, and supplier remediation follow-up.
- Provide technical escalation and mentoring for L4 analysts and maintain cryptographic knowledge articles and implementation guides.

Must-Have Skills :

- Robust hands-on knowledge of enterprise cryptography, including PKI, X.509 certificates, TLS, cipher suites, KMS, HSMs, secrets management, key lifecycle, encryption at rest/transit, and cloud key services.
- Practical experience with cryptographic discovery, CBOM-driven inventory, source code scanning, network/endpoint telemetry, and remediation tracking.
- Working knowledge of post-quantum cryptography, crypto agility, NIST-approved algorithms, hybrid transition patterns, and risk-prioritized remediation.
- Ability to convert cryptographic policy and architecture direction into actionable engineering guidance across CI/CD, SSDLC, cloud, identity, and third-party governance.

Professional Certifications :

- CISSP (preferred)
- CCSP, AWS Certified Security - Specialty, Microsoft Azure Security Engineer, or equivalent (preferred)
- CISM, CISA, or CRISC (preferred)
- Security , SSCP, or equivalent (preferred)
- Relevant PKI, KMS, HSM, or post-quantum cryptography training/certification (preferred)

Note : For your candidature to be considered on this job, you need to apply necessarily on the company's redirected page of this job. Please make sure you apply on the redirected page as well.

📌 Amgen - Specialist - Information Security (India)
🏢 AMGEN
📍 India