Senior Lead Security Engineer - PKI, Cryptography

What you'll do

• Own cryptography and key-management strategy, standards, and roadmaps across platforms and applications.
• Design and deliver key-management, data-protection, and applied cryptography capabilities, including lifecycle controls and certificate automation.
• Embed security in development and operations through reusable tooling, reviews, testing, threat modeling, and cross-team guidance.

What they ask for

• Formal training or certification in security engineering concepts and 5+ years of applied experience.
• Strong system-design and applied-cryptography foundation, with demonstrated experience building secure systems and hands-on key-management experience.
• Advanced, hands-on Java experience, strong testing discipline, and secure-coding practices.
• Experience operating enterprise-grade services and leading threat modeling, vulnerability assessment, remediation, and cross-functional initiatives.

Nice to have

• Deep experience with hardware security modules and key-management service platforms.
• Experience with PKI and TLS at scale, secrets management, or post-quantum migration planning.

Tools

Java, hardware security module, key management service, public key infrastructure, transport layer security, mutual transport layer security, static and dynamic analysis, policy-as-code

AI focus

Review and validate AI-assisted security recommendations before adoption, escalate uncertainty, and ensure outcomes meet security, resiliency, and auditability expectations.