Description :

Role Overview :

We are seeking a Senior Cryptography & Security Engineer to design, implement, and maintain advanced cryptographic systems and secure authentication mechanisms within the platform. This role focuses on encryption systems, key management, PKI, HSM/KMS integrations, and cryptographic compliance.

Key Responsibilities :

Cryptographic Systems :

- Design and implement encryption systems (symmetric/asymmetric)

- Manage key lifecycle (generation, rotation, revocation, storage)

- Implement JWT signing and validation mechanisms

- Develop secure token-based authentication systems

- Handle certificate validation and PKI operations

HSM/KMS Integration :

- Integrate with Hardware Security Modules (HSMs)

- Integrate with cloud-based KMS (AWS KMS, Azure Key Vault, GCP KMS)

- Implement secure key storage and cryptographic isolation

- Ensure FIPS-compliant cryptographic operations

Authentication & Identity :

- Maintain SSO/OIDC implementations

- Implement MFA/TOTP authentication flows

- Secure OAuth2 authorization servers

- Implement secure session management

Security Architecture :

- Conduct threat modeling and cryptographic risk analysis

- Review and implement OWASP security best practices

- Ensure compliance with security frameworks (SOC2, ISO 27001, PCI-DSS)

- Collaborate on CBOM generation and crypto asset discovery

Cryptography :

- Strong understanding of :

1. RSA, ECC, AES

2. TLS and certificate chains

3. PKI and X.509

4. Hashing and digital signatures

- Hands-on experience with cryptographic libraries

- Knowledge of FIPS standards

Authentication & Identity :

- OAuth 2.0, OIDC

- JWT implementation

- MFA/TOTP systems

- Identity federation

Security Standards :

- OWASP guidelines

- Threat modeling

- Secure coding practices

Nice to Have :

- CISSP, OSCP, CEH, Security+

- Background in applied cryptography or mathematics

- Experience with security research

- Experience with crypto compliance and CBOM

Experience Requirements :

- 4+ years in security engineering

- 2+ years hands-on cryptographic implementation

- Proven experience with HSM/KMS integrations

- Bachelor's degree in Cybersecurity, Computer Science, or equivalent