CTO - Cryptography Engineering Lead

Job Description

6-10 years overall experience; at least 3-5 years in secure engineering, cryptographic implementation, application security,engineering, platform security, DevSecOps, or security-focused software engineering.

Bridge PQC architecture and application implementation by creating reusable crypto-agility patterns, pilots, engineering accelerators and validation methods

͏

Key Responsibilities

• Analyze application and platform use of crypto libraries, TLS stacks, signing workflows, encryption modules, key stores, HSM/KMS interfaces and hardcoded cryptographic dependencies.
• Create reference implementations for hybrid key exchange, signature migration, crypto abstraction, certificate upgrades and library replacement patterns.
• Build reusable engineering playbooks for Java, .NET, Python, Go, C/C++, APIs, middleware and cloud-native services where applicable.
• Support PQC pilots using approved libraries, testbeds and partner/open-source tooling.
• Define validation approach for interoperability, regression, performance, latency, compatibility and operational impact.
• Guide application delivery teams rather than owning every application-specific code change.
• Support AI-assisted code analysis and remediation workflows where appropriate, including review of generated recommendations before implementation.

͏

Required Skills

• Strong programming and engineering background in at least two of Java, .NET/C#, Python, Go, C/C++, Rust or JavaScript/TypeScript.
• Good understanding of OpenSSL, Bouncy Castle, crypto APIs, TLS stacks, PKCS#11, key stores, secret management, cloud KMS/HSM and certificate usage patterns.
• Working knowledge of secure SDLC, DevSecOps pipelines, automated testing, CI/CD, dependency management and application security controls.
• Ability to create clean reference code, integration guides, technical design notes and reusable implementation patterns.
• Practical understanding of PQC libraries and hybrid migration concepts.

͏

Preferred / Advantageous Skills

• Hands-on exposure to liboqs, OQS-OpenSSL, PQClean, cloud KMS/HSM, service mesh, API gateway or code-signing pipelines.
• Experience with performance testing, protocol testing, fuzzing, regression automation or secure code review.
• BFS/payment/core banking exposure is useful but not mandatory for the seed role.

Expected Deliverables / Outputs

• Reusable crypto remediation patterns
• PQC pilot implementation guide
• Reference code/assets
• Performance and compatibility validation notes
• Application engineering playbook

͏

Perform root-cause analysis to identify and troubleshoot recurring technical issues. Modify software codes to resolve errors, adapt to new hardware and software, enhance performance, and upgrade interfaces."

Implementation-"Collaborate with technical teams to validate configurations, facilitate integration of new applications, and address dependencies during deployment. Prepare user training documents and related frameworks to ensure smooth adoption new applications and minimize transition risks."