Cryptography Engineer

Dart Browser; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work across time zones

Job summary

Dart Browser is seeking a security‑minded cryptography engineer to design and build the cryptographic foundations of an identity and key‑management system. The role emphasizes hardware-backed identity, post‑quantum cryptography, and robust key lifecycle design with emphasis on usability and independent auditability.

The work includes implementing key generation and attestation using TPM 2.0 and Secure Enclave, selecting ML‑KEM and ML‑DSA implementations, and coordinating with external auditors

Qualifications

• Production experience applying cryptography in real systems.
• Familiarity with hardware security modules and platform key stores.
• Sound judgment about choosing approaches that can be reviewed and audited.

Responsibilities

• Implement key generation and attestation using TPM 2.0 and Secure Enclave capabilities.
• Select, integrate, and maintain ML-KEM and ML-DSA implementations.
• Design key recovery and rotation flows for non-specialist users.
• Coordinate with external auditors during annual security reviews.

Skills

Cryptography experience

Hardware security modules

Auditable security practices

Tools

TPM 2.0

Secure Enclave

ML-KEM

ML-DSA

Job description

Role overview

Design and build the cryptographic foundations of an identity and key-management system. The work includes hardware-backed identity, post-quantum cryptography, and key lifecycle design, with attention to making security controls usable and independently auditable.

Responsibilities

• Implement key generation and attestation using TPM 2.0 and Secure Enclave capabilities.
• Select, integrate, and maintain ML-KEM and ML-DSA implementations.
• Design key recovery and rotation flows for non-specialist users.
• Coordinate with external auditors during annual security reviews.

Requirements

• Production experience applying cryptography in real systems.
• Familiarity with hardware security modules and platform key stores.
• Sound judgment about choosing approaches that can be reviewed and audited.

Benefits and work setup

• Full-time, remote role open across time zones.