Cryptographic Security Engineer

Responsibilities :

• Manage all types of cryptographic keys and certificates across enterprise systems.

• Cryptographic Keys

Symmetric Keys

Asymmetric Keys (Public/Private Key Pairs)

• Secrets

API Keys and Access Tokens

Application Secrets

- Certificates

SSL/TLS Certificates for web servers

Clients Certificates for mutual TLS authentication

Includes certificate management along with its private key.

• Work with HSMs (Hardware Security Modules), KMS (Key Management Systems), and cloud-native tools, (e.g., AWS KMS, Azure Key Vault)
• Develop and manage enterprise PKI systems and certificate lifecycle
• Support internal teams with certificate installation and troubleshooting
• Design and Deploy scalable key certificate management infrastructure.
• Integrate key certificate management solutions with enterprise applications and platforms.
• Automate key certificate rotation and renewal processes
• Assist developers and DevOps teams with secure key usage.
• Provide subject matter expertise in cryptocurrency, including symmetric/asymmetric encryption.
• Maintain inventory of key certificate and related assets.

Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 3+ years experience in IT Security, preferably with a focus on encryption and key management.
• Knowledge of PKI, TLS/SSL, and secure key storage.
• Familiarity with tools like AWS KMS, Thales HSM, or HashiCorp Vault.
• Strong knowledge of SSL/TLS, PKI and X.509 certificates.
• Experience with HSMs, KMIP protocol, and key management best practices.
• Basic understanding of digital certificates and encryption.
• Understanding of multi-cloud encryption practices.
• Knowledge of Quantum-safe cryptography trends (for forward-looking orgs)
• Experience with certificate automation tools and cloud platforms (AWS ACM, Azure Key Vault)