Cryptographic Software Engineer (HSMs)

Darwin Recruitment; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Darwin Recruitment is seeking a Cryptographic Software Engineer to design and implement secure software for cryptographic services, HSMs and key management. You will develop cryptographic libraries, integrate with customer applications and contribute to crypto agility and PQC initiatives.

Strong C/C++/Rust, Linux experience and security-minded development are required. You'll work across encryption, signing, hashing, key management and support interfaces such as PKCS#11 and KMIP.

Qualifications

• Strong production development experience in one or more of C, C++ or Rust.
• Practical understanding of encryption, digital signatures, hashing and key management.
• Experience developing against HSMs, cryptographic libraries or key management services.
• Familiarity with interfaces such as PKCS#11, KMIP, OpenSSL or Java cryptography APIs.
• Strong debugging, testing and secure software development skills.
• Experience working with Linux and integrating software across different environments.

Responsibilities

• Develop software for cryptographic services, HSM integrations and key management platforms.
• Build and maintain interfaces connecting security products with customer applications.
• Implement secure key generation, storage, rotation and access controls.
• Improve reliability, performance and interoperability across cryptographic components.
• Develop automated tests and investigate complex software and integration issues.
• Contribute to crypto-agility and PQC integration as product requirements evolve.

Skills

Security-focused software development

Debugging & testing

Team collaboration

Tools

C/C++/Rust

PKCS#11

KMIP

OpenSSL/Java Cryptography APIs

Linux

Job description

Cryptographic Software Engineer, HSM & Key Management

We need software engineers specialising in cryptography, hardware security modules and key management for future opportunities with security technology businesses.

The focus is on engineers who build secure software, libraries and integrations supporting encryption, signing and the protection of cryptographic keys.

Typical responsibilities

• Develop software for cryptographic services, HSM integrations and key management platforms.
• Build and maintain interfaces connecting security products with customer applications.
• Implement secure key generation, storage, rotation and access controls.
• Improve reliability, performance and interoperability across cryptographic components.
• Develop automated tests and investigate complex software and integration issues.
• Contribute to crypto-agility and PQC integration as product requirements evolve.

Relevant experience

• Strong production development experience in one or more of C, C++ or Rust.
• Practical understanding of encryption, digital signatures, hashing and key management.
• Experience developing against HSMs, cryptographic libraries or key management services.
• Familiarity with interfaces such as PKCS#11, KMIP, OpenSSL or Java cryptography APIs.
• Strong debugging, testing and secure software development skills.
• Experience working with Linux and integrating software across different environments.

PQC implementation, FIPS 140-3 validation work, cloud KMS and side-channel countermeasures would be useful additional experience.