Principal Engineer Cryptography

Required

• Lead architecture reviews and technical design sessions with cross-functional engineering teams, providing requirements and guidance
• Establish technical documentation standards and compliance engineering requirements for CA-related systems
• Mentor engineers on PKI concepts, cryptographic implementations, and compliance engineering patterns
• 8+ years of hands-on engineering experience in PKI systems, applied cryptography, or security infrastructure with proven technical leadership and strong technical background in languages such as Go, Python, Java, or C++
• Deep expertise in PKI architecture including X.509 certificate structures, ASN.1 encoding, certificate chain validation, HSM operations, and cryptographic primitives
• Proven experience translating CA/Browser Forum Baseline Requirements into technical specifications, including controls for key generation, certificate issuance, and audit logging
• Systems engineering background with experience in distributed systems, API design, database architecture, and cloud infrastructure (AWS/GCP/Azure)
• Strong ability to define requirements for PKI protocols (ACME, Certificate Transparency, OCSP/CRL) and translate compliance requirements into technical specifications, detailed engineering requirements, and test automation scripts
• Advanced degree in Computer Science, Cryptography, Mathematics, or Electrical Engineering
• Experience researching and evaluating post-quantum cryptographic algorithms (NIST PQC finalists, hybrid modes)
• Security certifications such as CISSP, CEH, or specialized cryptography credentials
• Experience with security audit processes (WebTrust for CAs, ETSI EN 319 411) from a technical implementation perspective