Senior Cloud Security – Cryptography Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Create solutions designed to operate within a large-scale cloud infrastructure securely, supporting the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP).

• Assist in the deployment of software-defined networking, advanced security measures, and cryptographic functionalities.

• Engineer and develop solutions that cater to web and mobile applications, machine learning, and big data.

• Construct foundational backend services utilized by Cloud clients and internal Google systems for the security, rotation, and management of cryptographic keys.

• Engage with all layers of the production stack, ranging from high-level Cloud APIs to low-level operating systems.

• Design and scale Hardware Security Module (HSM) backed services to fulfill compliance and high-availability standards.

• Devise cryptographic and secret management solutions, oversee key lifecycles, and manage encryption methodologies.

• Architect and implement environments such as Confidential VMs and Trusted Execution Environments (TEEs).

• Establish robust, reliable data-centric security and authentication protocols across global cloud data centers.

• Implement Client-Side Encryption (CSE) for Google Workspace and ensure mutually authenticated TLS 1.3 communications.

⛳️ Requirements

• Active Top Secret/SCI clearance.

• Bachelor’s degree in Computer Science or equivalent hands-on experience.

• Over 8 years of industry experience in software development or cloud infrastructure engineering.

• More than 5 years of advanced expertise in general-purpose programming languages such as Python, C, C++, Java, or Go.

• At least 5 years of experience in designing and developing large-scale, distributed infrastructures or highly secure operating environments.

• A minimum of 5 years’ experience with cryptographic algorithms, Public Key Infrastructure (PKI), TLS/SSL, authentication protocols, and threat modeling.

• At least 3 years of experience with Google Cloud Identity, OAuth/SAML, Keycloak, and Google Workspace SSO integration.

• Strong programming skills in languages such as C++, Go, or Python.

• Minimum of 3 years of experience in security and cryptographic engineering.

• At least 3 years of experience in Agile team roles supporting security and cryptographic initiatives.

• A minimum of 3 years of experience with PKI, Key Management, and certificate lifecycle management.

• GCP Professional Cloud Security Engineer certification.

• GIAC Python & Cryptography (GPCS / GCIP) certification.

• CCSP (Certified Cloud Security Professional) certification.

• CISA (Certified Information Systems Auditor) certification.

🏝️ Benefits

• Healthcare.

• Wellness programs.

• Financial support.

• Retirement plans.

• Family support.

• Continuing education opportunities.

• Time off benefits.