Cryptography (Senior Rust & C++ Security Systems Engineer)

Senior Rust & C++ Security Systems Engineer

Crypto Core Evolution & Interoperability

REMOTE| RUST |C++ | CRYPTOGRAPHIC SYSTEMS

About the role

Own the technical bridge between the current C++ Crypto Core and a possible future Rust implementation of security-sensitive EKI modules. We seek a systems engineer who can deliver in both languages—not a Rust-only prototype developer.

Your focus

Help establish safe module boundaries now, prove interoperability, and define a measured migration path if the team later approves a phased Rust transition. The initial platform remains a practical, security-reviewed implementation.

What you will build

• Implement and review security-sensitive modules in Rust and modern C++, with clear APIs for key lifecycle, authentication verification and protected-key-store access.
• Design safe C/C++–Rust FFI boundaries, ownership rules, error contracts and secret-buffer handling; minimize and document any necessary unsafe Rust.
• Create interoperability prototypes and side-by-side conformance tests that preserve protocol behavior, key IDs, certificate identity and revocation semantics.
• Integrate established crypto/HSM libraries for HMAC, AEAD, HKDF, TLS/PKI and optional ML-KEM/ML-DSA; do not implement custom cryptographic primitives.
• Lead threat-focused reviews, memory-safety/fuzz testing, profiling, build/release hardening and performance/security assessment of migration choices.

Required experience & skills

• Strong hands-on Rust and C++17/20 engineering in Linux environments, typically 6+ years of relevant systems work or equivalent demonstrated depth.
• Proven Rust proficiency: ownership/borrowing, lifetimes, traits, Cargo, concurrency, error handling and review of unsafe/FFI code.
• Practical applied-crypto knowledge and experience integrating mature cryptographic libraries, key stores, TLS/PKI or security-sensitive APIs.
• Ability to ship reliable code across language boundaries with thorough tests, debugging, security reviews and clear technical communication.

Preferred / additional strengths

Experience with PKCS#11/HSMs, OpenSSL integration, Rust/C++ ABI compatibility, ML-KEM/ML-DSA, fuzzing/sanitizers, secure memory and progressive migrations of production C++ systems.

What success looks like

A secure, tested Rust/C++ interoperability layer and migration-ready Crypto Core boundaries, plus concrete prototypes and evidence supporting an informed future Rust decision.

How we evaluate candidates

Rust and C++ code review/coding task, FFI and memory-safety discussion, applied-crypto integration design and threat-oriented testing.