Full job description

About the Role

Discover your future at Citi

Working at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you'll have the opportunity to grow your career, give back to your community and make a real impact.

Job Overview

Citi's Integrated Digital Assets Platform (CIDAP) is at the vanguard of institutional blockchain adoption — and security is its foundation. As digital assets move from innovation to regulated infrastructure, the cryptographic integrity of every transaction, wallet, and key lifecycle operation becomes mission-critical. We are building the security layer that the world's most sophisticated financial institution can trust.

We are seeking a Senior Security Engineer (VP) to join our New York-based Digital Assets Platform engineering team. This is a hands-on, Java-focused backend engineering role for a security-minded engineer who understands both the craft of secure software development and the cryptographic primitives that underpin digital asset custody, signing, and key management.

You will sit inside the core engineering team — writing production code every day — while being the resident authority on cryptographic design patterns, HSM integration, MPC protocols, and security architecture. Your work will directly protect billions of dollars of digital asset infrastructure used by institutional clients worldwide.

Key Responsibilities

Design, develop, and maintain security-critical backend services in Java — including cryptographic libraries, key management APIs, signing workflows, and secure transaction pipelines — within Citi's Digital Assets Platform.
Own the integration and operational lifecycle of Hardware Security Modules (HSMs) — including vendor evaluation, API integration (PKCS#11, JCE), key generation, rotation, and policy enforcement.
Architect and implement Multi-Party Computation (MPC) protocols and threshold signature schemes (TSS) for distributed key management and institutional-grade wallet signing operations.
Apply and enforce cryptographic best practices across the platform — including symmetric and asymmetric encryption (AES-GCM, RSA, ECC), digital signatures (ECDSA, EdDSA), hashing, and key derivation (HKDF, PBKDF2).
Define and implement secure design patterns for distributed systems — including zero-trust architecture, secrets management, mutual TLS, certificate lifecycle management, and secure enclave usage.
Collaborate with Citi's Cybersecurity, Risk, and Architecture teams to conduct threat modelling, security design reviews, and cryptographic risk assessments for new platform capabilities.

Job Family Group:

Job Family:

Time Type:

Primary Location:

Primary Location Full Time Salary Range:

Most Relevant Skills

Other Relevant Skills

Anticipated Posting Close Date:

Automated Processing and AI