India - Hyderabad

JOB ID: R-248009 LOCATION: India - Hyderabad WORK LOCATION TYPE: On Site DATE POSTED: Jul. 21, 2026 CATEGORY: Information Systems

Role Name: Specialist Information Security - Encryption Agility Engineer

Job Posting Title :Specialist Information Security - Encryption Agility Engineer

Workday Job Title :Specialist Information Security

Department Name :Trusted Core Technologies

Role Global Career Framework (GCF) :5A

ABOUT AMGEN

Amgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver cutting-edge medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what's known today.

ABOUT THE ROLE

Role Description : This position will translate architecture direction into working implementation tasks, data quality rules, dashboards, tool integrations, remediation tickets, secure patterns, developer guidance, and repeatable Standard Operating Procedures (SOPs). The engineer will partner with Digital Identity Access Service (DIAS), PKI and certificate service owners, Application Security, Artificial Intelligence (AI) Security, Enterprise Architecture, cloud, infrastructure, platform, Risk and Compliance, Procurement, Legal, Third Party Risk Management (TPRM), Operational Technology (OT), and vendor teams to help make Amgen's PQC roadmap measurable, actionable, and sustainable.

Roles & Responsibilities :

- Execute assigned Encryption Agility Service workstreams, including intake analysis, backlog execution, roadmap tracking, service metrics, reporting inputs, SOP updates,



and service improvement actions under the direction of the Senior Manager and Principal Architect.
- Operate enterprise cryptographic discovery across source code, binaries, cloud key services, endpoints, file systems, network traffic, PKI and certificates, KMS and secrets, vendor attestations, Software Bill of Materials (SBOM) inputs, and Subject Matter Expert (SME) interviews.
- Build, maintain, and improve the Amgen CBOM using CycloneDX 1.6+ as the target format, including required fields, source systems, ownership attributes, quantum-vulnerability status, remediation status, data quality checks, reporting views, and asset correlation.
- Support tool integration and data normalization across Amgen Enterprise and cryptographic discovery platforms.
- Analyze cryptographic scan outputs, source code findings, certificate chains, cipher suite configurations, Transport Layer Security (TLS) settings, Secure Shell (SSH) settings, Open Authorization (OAuth), Security Assertion Markup Language (SAML), JSON Web Token (JWT) patterns, cloud key configurations, and key or secret storage patterns.
- Implement and document remediation patterns approved by the Principal Architect, including hybrid TLS, proxy-based crypto agility, Network encapsulation, Internet Protocol Security (IPsec), Media Access Control Security (MACsec), Key Management Interoperability Protocol (KMIP), Public-Key Cryptography Standard #11 (PKCS#11), provider libraries,



custom code libraries, symmetric cryptography, Hash-Based Message Authentication Code (HMAC), TLS termination, reverse proxies, encrypted overlays, segmentation controls, compensating controls, and risk-based replacement or decommission pathways.
- Coordinate with DIAS, PKI service owners, certificate management teams, identity teams, cloud, infrastructure, and platform teams on certificate visibility, Certificate Lifecycle Manager (CLM) evaluation, certificate rotation, manual-to-automated deployment migration, post-quantum PKI readiness, hybrid certificate testing, Certificate Authority (CA) modernization, KMS strategy, Hardware Security Module (HSM) patterns, secrets management, key rotation, key retirement, storage standards, ownership, reporting, and centralized or federated control options.
- Partner with Application Security, AI Security, Enterprise Architecture, Development and Operations (DevOps), and engineering teams to publish approved cryptographic libraries, secure code examples, reusable patterns, Continuous Integration/Continuous Delivery (CI/CD) controls, Secure Software Development Life Cycle (SSDLC) requirements, scanning rules, developer remediation playbooks, and practical implementation guidance.
- Support vendor and third-party technical governance with Procurement, Legal, Risk and Compliance, TPRM, and business owners by preparing technical questionnaire content, CBOM requests, evidence reviews, roadmap tracking, contract language inputs, escalation triggers, and supplier remediation follow-up.
- Provide technical escalation and mentoring for Global Career Framework level 4 (L4) analysts and contributors, maintain cryptographic knowledge articles and implementation gui

📌 Encryption Agility Engineer (Hyderabad)
🏢 AMGEN
📍 Hyderabad