Client: US technology company (digital identity and payments infrastructure) · Location: remote, LATAM, US Eastern overlap · Level: senior · Engagement: full-time contractor
You will own applied cryptography across the product: key management, protocol design review and the migration plan to post-quantum algorithms.
What you will do
Design and operate key management on HSMs and cloud KMS, including rotation, escrow and ceremonies
Review protocol and feature designs for correct use of encryption, signatures and key exchange
Run PKI: certificate authorities, issuance automation and mTLS between services
Build the crypto inventory and lead the roadmap to NIST post-quantum standards (ML-KEM, ML-DSA)
Maintain internal crypto libraries and guidance so product teams do not roll their own
Support audits and certifications such as FIPS 140-3, PCI DSS and SOC 2
What you bring
6+ years in security engineering, 3+ focused on applied cryptography
Solid command of modern primitives and protocols (AES-GCM, ECC, TLS 1.3, Noise, JOSE)
Hands-on HSM and KMS experience (Thales, AWS CloudHSM, AWS KMS or equivalent)
Coding in Go, Rust or C, with secure coding and code review experience
Ability to explain cryptographic risk to non-specialists in English
Nice to have
Threshold signatures, MPC or zero-knowledge proof experience
Degree or research background in cryptography
Contributions to open-source crypto libraries
Originally posted on