Cryptography Engineer

Role overview Design and build the cryptographic foundations of an identity and key-management system. The work includes hardware-backed identity, post-quantum cryptography, and key lifecycle design, with attention to making security controls usable and independently auditable.

Responsibilities - Implement key generation and attestation using TPM 2.0 and Secure Enclave capabilities. - Select, integrate, and maintain ML-KEM and ML-DSA implementations. - Design key recovery and rotation flows for non-specialist users. - Coordinate with external auditors during annual security reviews.

Requirements - Production experience applying cryptography in real systems. - Familiarity with hardware security modules and platform key stores. - Sound judgment about choosing approaches that can be reviewed and audited.

Benefits and work setup - Full-time, remote role open across time zones.