Note: The job is a remote job and is open to candidates in USA. CACI International Inc is a leading provider of technology solutions and services, and they are seeking a Senior Cloud Security & Cryptography Engineer. This role involves developing secure solutions for large-scale cloud environments, focusing on cryptographic integrity and security for critical data services.
Responsibilities
- Build foundational backend services used by Cloud customers and internal Google systems to secure, rotate, and manage cryptographic keys (e.g., Cloud Key Management Service)
- Work across all layers of the production stack, from high-level, customer-facing Cloud APIs down to low-level operating systems and physical hardware
- Architect and scale HSM (Hardware Security Module) backed services to meet strict enterprise compliance and high-availability requirements
- Design cryptographic and secret management solutions, manage key lifecycles, and handle encryption schemes (e.g., Customer-Managed Encryption Keys or External Key Managers)
- Design and deploy environments like Confidential VMs and Trusted Execution Environments (TEEs) to protect data while it is in use
- Design robust, reliable data-centric security and authentication protocols across global, hyper-scale cloud data centers. Implement Client-Side Encryption (CSE) for Google Workspace and ensure mutually authenticated TLS 1.3 communications
Skills
- Active Top Secret/SCI
- BS in Computer Science, or equivalent practical experience in data structures and software security
- 8+ years of industry experience in software development or cloud infrastructure engineering
- 5+ years of advanced proficiency in general-purpose languages like Python, C, C++, Java, or Go
- 5+ years' experience designing and developing large-scale, distributed infrastructure or highly secure operating environments
- 5+ years' experience with cryptographic algorithms, Public Key Infrastructure (PKI), TLS/SSL, authentication protocols, and threat modeling
- 3+ years of Google Cloud Identity, OAuth/SAML, Keycloak, and Google Workspace SSO integration
- Strong programming proficiency in languages such as C++, Go, or Python
- At least 3 years of experience in security and cryptographic engineering
- At least 3 years of experience in Agile team roles supporting security and cryptographic projects
- At least 3 years of experience with PKI, Key Management, and certificate lifecycle processes
- GCP Professional Cloud Security Engineer certification
- GIAC Python & Cryptography (GPCS / GCIP) certification
- CCSP (Certified Cloud Security Professional) certification
- CISA (Certified Information Systems Auditor) certification
- 4+ years of experience implementing scalable cloud applications and platform services utilizing cryptographic controls
- 4+ years of experience using Terraform to codify security and cryptographic infrastructure configurations
- 4+ years of network or operating system administrative experience focused on security hardening
- FIPS 140-2/3 validation processes and managing keys in a multi-level security environment, including policies for key generation and rotation
Benefits
- Flexible time off benefit
- Robust learning resources
- Comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits
Company Overview