CTO - Cryptography Engineering Lead

Wipro; Bengaluru; On-site; INR 4,500,000 - 7,000,000; Full time

Job summary

Wipro is looking for a security engineering professional with 6–10 years of total experience and 3–5 years in secure engineering, cryptographic implementation, application security, or DevSecOps. The role involves bridging PQC architecture with reusable crypto patterns and validation methods.

You will create reference implementations for hybrid key exchange, crypto abstraction, and library replacement patterns, and build engineering playbooks across languages and cloud-native services.

Qualifications

• 6-10 years overall experience with 3-5 years in secure engineering or related areas.
• Bridge PQC architecture with reusable crypto patterns and validation methods.
• Must be able to create reference implementations and integration guides.
• Knowledge of PQC libraries and hybrid migration concepts.
• Experience with secure SDLC, DevSecOps, CI/CD and automation.

Responsibilities

• Analyze crypto libraries, TLS stacks, signing workflows, and HSM/KMS interfaces.
• Create reference implementations for hybrid key exchange and library replacement.
• Build reusable playbooks for Java, .NET, Python, Go, C/C++, APIs, middleware and cloud-native services.
• Support PQC pilots using approved libraries and tooling.
• Define validation approach for interoperability, performance and latency.
• Guide application delivery teams and review AI-assisted code remediation.

Skills

Java

.NET/C#

Python

Go

C/C++

Rust

JavaScript/TypeScript

Tools

OpenSSL

Bouncy Castle

PKCS#11

Cloud KMS/HSM

Job description

6-10 years overall experience; at least 3-5 years in secure engineering, cryptographic implementation, application security,engineering, platform security, DevSecOps, or security-focused software engineering.

Bridge PQC architecture and application implementation by creating reusable crypto-agility patterns, pilots, engineering accelerators and validation methods

Key Responsibilities

Job description:
Job Description

6-10 years overall experience; at least 3-5 years in secure engineering, cryptographic implementation, application security,engineering, platform security, DevSecOps, or security-focused software engineering.

Bridge PQC architecture and application implementation by creating reusable crypto-agility patterns, pilots, engineering accelerators and validation methods

Key Responsibilities

• Analyze application and platform use of crypto libraries, TLS stacks, signing workflows, encryption modules, key stores, HSM/KMS interfaces and hardcoded cryptographic dependencies.
• Create reference implementations for hybrid key exchange, signature migration, crypto abstraction, certificate upgrades and library replacement patterns.
• Build reusable engineering playbooks for Java, .NET, Python, Go, C/C++, APIs, middleware and cloud-native services where applicable.
• Support PQC pilots using approved libraries, testbeds and partner/open-source tooling.
• Define validation approach for interoperability, regression, performance, latency, compatibility and operational impact.
• Guide application delivery teams rather than owning every application-specific code change.
• Support AI-assisted code analysis and remediation workflows where appropriate, including review of generated recommendations before implementation.

Required Skills

• Strong programming and engineering background in at least two of Java, .NET/C#, Python, Go, C/C++, Rust or JavaScript/TypeScript.
• Good understanding of OpenSSL, Bouncy Castle, crypto APIs, TLS stacks, PKCS#11, key stores, secret management, cloud KMS/HSM and certificate usage patterns.
• Working knowledge of secure SDLC, DevSecOps pipelines, automated testing, CI/CD, dependency management and application security controls.
• Ability to create clean reference code, integration guides, technical design notes and reusable implementation patterns.
• Practical understanding of PQC libraries and hybrid migration concepts.

Preferred / Advantageous Skills

• Hands-on exposure to liboqs, OQS-OpenSSL, PQClean, cloud KMS/HSM, service mesh, API gateway or code-signing pipelines.
• Experience with performance testing, protocol testing, fuzzing, regression automation or secure code review.
• BFS/payment/core banking exposure is useful but not mandatory for the seed role.

Expected Deliverables / Outputs

• Reusable crypto remediation patterns
• PQC pilot implementation guide
• Reference code/assets
• Performance and compatibility validation notes
• Application engineering playbook

Perform root-cause analysis to identify and troubleshoot recurring technical issues. Modify software codes to resolve errors, adapt to new hardware and software, enhance performance, and upgrade interfaces.

Implementation-"Collaborate with technical teams to validate configurations, facilitate integration of new applications, and address dependencies during deployment. Prepare user training documents and related frameworks to ensure smooth adoption new applications and minimize transition risks."

Reinvent your world.We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions.

Applications from people with disabilities are explicitly welcome.