Client: US technology company (digital identity and payments infrastructure) · Location: remote, LATAM, US Eastern overlap · Level: senior · Engagement: full-time contractor
You will own applied cryptography across the product: key management, protocol design review and the migration plan to post-quantum algorithms.
What you will do
Design and operate key management on HSMs and cloud KMS, including rotation, escrow and ceremonies
Review protocol and feature designs for correct use of encryption, signatures and key exchange
Run PKI: certificate authorities, issuance automation and mTLS between services
Build the crypto inventory and lead the roadmap to NIST post-quantum standards (ML-KEM, ML-DSA)
Maintain internal crypto libraries and guidance so product teams do not roll their own
Support audits and certifications such as FIPS 140-3, PCI DSS and SOC 2
What you bring
6+ years in security engineering, 3+ focused on applied cryptography
Solid command of modern primitives and protocols (AES-GCM, ECC, TLS 1.3, Noise, JOSE)
Hands-on HSM and KMS experience (Thales, AWS CloudHSM, AWS KMS or equivalent)
Coding in Go, Rust or C, with secure coding and code review experience
Ability to explain cryptographic risk to non-specialists in English
Nice to have
Threshold signatures, MPC or zero-knowledge proof experience
Degree or research background in cryptography
Contributions to open-source crypto libraries
- Work permits
- Andorra, United Arab Emirates, Afghanistan, Antigua & Barbuda, Anguilla, Albania, Armenia, Angola, Antarctica, Argentina, Austria, Aruba, Åland Islands, Azerbaijan, Bosnia & Herzegovina, Barbados, Belgium, Burkina Faso, Bulgaria, Bahrain, Burundi, Benin, St. Barthélemy, Bermuda, Bolivia, Caribbean Netherlands, Brazil, Bahamas, Bouvet Island, Botswana, Belarus, Belize, Canada, Congo - Kinshasa, Central African Republic, Congo - Brazzaville, Switzerland, Côte d’Ivoire, Cook Islands, Chile, Cameroon, Colombia, Costa Rica, Cuba, Cape Verde, Curaçao, Cyprus, Czechia, Germany, Djibouti, Denmark, Dominica, Dominican Republic, Algeria, Ecuador, Estonia, Egypt, Western Sahara, Eritrea, Spain, Ethiopia, Finland, Falkland Islands (Islas Malvinas), Faroe Islands, France, Gabon, United Kingdom, Grenada, Georgia, French Guiana, Guernsey, Ghana, Gibraltar, Greenland, Gambia, Guinea, Guadeloupe, Equatorial Guinea, Greece, South Georgia & South Sandwich Islands, Guatemala, Guinea-Bissau, Guyana, Heard & McDonald Islands, Honduras, Croatia, Haiti, Hungary, Ireland, Israel, Isle of Man, Iraq, Iran, Iceland, Italy, Jersey, Jamaica, Jordan, Kenya, Kyrgyzstan, Comoros, St. Kitts & Nevis, Kuwait, Cayman Islands, Kazakhstan, Lebanon, St. Lucia, Liechtenstein, Liberia, Lesotho, Lithuania, Luxembourg, Latvia, Libya, Morocco, Monaco, Moldova, Montenegro, St. Martin, Madagascar, North Macedonia, Mali, Martinique, Mauritania, Montserrat, Malta, Mauritius, Malawi, Mexico, Mozambique, Namibia, Niger, Nigeria, Nicaragua, Netherlands, Norway, Oman, Panama, Peru, Poland, St. Pierre & Miquelon, Puerto Rico, Palestine, Portugal, Paraguay, Qatar, Réunion, Romania, Serbia, Rwanda, Saudi Arabia, Seychelles, Sudan, Sweden, St. Helena, Slovenia, Svalbard & Jan Mayen, Slovakia, Sierra Leone, San Marino, Senegal, Somalia, Suriname, South Sudan, São Tomé & Príncipe, El Salvador, Sint Maarten, Syria, Eswatini, Turks & Caicos Islands, Chad, French Southern Territories, Togo, Tajikistan, Turkmenistan, Tunisia, Türkiye, Trinidad & Tobago, Tanzania, Ukraine, Uganda, United States, Uruguay, Uzbekistan, Vatican City, St. Vincent & Grenadines, Venezuela, British Virgin Islands, U.S. Virgin Islands, Kosovo, Yemen, Mayotte, South Africa, Zambia, and Zimbabwe
- Timezones
- LATAM, NA, and EMEA
- Experience
- 6+ years