JobCubby JobCubby
Sign up
I

Cybersecurity Engineer, Cryptography

ITMates

Services et conseil en informatique · 2-10 employés

Oct 01
Remote security Senior (5-10 yrs) Contractor
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

You will own applied cryptography across the product, including key management, protocol design reviews, and the migration to post-quantum algorithms. Additionally, you will manage PKI infrastructure, maintain internal crypto libraries, and ensure compliance with security standards like FIPS 140-3 and PCI DSS.

What they look for

Applied cryptography Key management HSM Cloud KMS PKI mTLS Post-quantum cryptography NIST standards Go Rust C Secure coding AES-GCM ECC TLS 1.3 JOSE

Requirements

The role requires 6+ years of security engineering experience with at least 3 years focused on applied cryptography. Candidates must have hands-on experience with HSM/KMS, proficiency in Go, Rust, or C, and a solid understanding of modern cryptographic protocols.

Full description

Client: US technology company (digital identity and payments infrastructure) · Location: remote, LATAM, US Eastern overlap · Level: senior · Engagement: full-time contractor

You will own applied cryptography across the product: key management, protocol design review and the migration plan to post-quantum algorithms.

What you will do

  • Design and operate key management on HSMs and cloud KMS, including rotation, escrow and ceremonies
  • Review protocol and feature designs for correct use of encryption, signatures and key exchange
  • Run PKI: certificate authorities, issuance automation and mTLS between services
  • Build the crypto inventory and lead the roadmap to NIST post-quantum standards (ML-KEM, ML-DSA)
  • Maintain internal crypto libraries and guidance so product teams do not roll their own
  • Support audits and certifications such as FIPS 140-3, PCI DSS and SOC 2

What you bring

  • 6+ years in security engineering, 3+ focused on applied cryptography
  • Solid command of modern primitives and protocols (AES-GCM, ECC, TLS 1.3, Noise, JOSE)
  • Hands-on HSM and KMS experience (Thales, AWS CloudHSM, AWS KMS or equivalent)
  • Coding in Go, Rust or C, with secure coding and code review experience
  • Ability to explain cryptographic risk to non-specialists in English

Nice to have

  • Threshold signatures, MPC or zero-knowledge proof experience
  • Degree or research background in cryptography
  • Contributions to open-source crypto libraries

Similar roles