Senior Cloud Crypto & Security Architect (TS/SCI)

VetJobs; United States; On-site; USD 115,000 - 252,000; Full time

Job summary

CACI International Inc in the United States is seeking a Senior Cloud Security & Cryptography Engineer to advance cryptographic systems for large-scale cloud infrastructure supporting sensitive operations. The role emphasizes secure key management, cryptographic integrity, and high-availability solutions.

The position requires a TS/SCI clearance, extensive experience in security-focused software development, and hands-on work with PKI, TLS, and cloud IAM integrations.

Qualifications

• Active Top Secret/SCI security clearance
• BS in Computer Science, or equivalent practical experience in data structures and software security.
• 8+ years of industry experience in software development or cloud infrastructure engineering.
• 5+ years of advanced proficiency in general-purpose languages like Python, C, C++, Java, or Go.
• 5+ years' experience designing and developing large-scale, distributed infrastructure or highly secure operating environments.
• 5+ years' experience with cryptographic algorithms, Public Key Infrastructure (PKI), TLS/SSL, authentication protocols, and threat modeling.
• 3+ years of Google Cloud Identity, OAuth/SAML, Keycloak, and Google Workspace SSO integration.
• Strong programming proficiency in languages such as C++, Go, or Python.
• At least 3 years of experience in security and cryptographic engineering
• At least 3 years of experience in Agile team roles supporting security and cryptographic projects
• At least 3 years of experience with PKI, Key Management, and certificate lifecycle processes
• GCP Professional Cloud Security Engineer certification
• GIAC Python & Cryptography (GPCS / GCIP) certification
• CCSP (Certified Cloud Security Professional) certification
• CISA (Certified Information Systems Auditor) certification.

Responsibilities

• Build foundational backend services used by Cloud customers and internal Google systems to secure, rotate, and manage cryptographic keys (e.g., Cloud Key Management Service).
• Work across all layers of the production stack, from high-level, customer-facing Cloud APIs down to low-level operating systems and physical hardware.
• Architect and scale HSM (Hardware Security Module) backed services to meet strict enterprise compliance and high-availability requirements.
• Design cryptographic and secret management solutions, manage key lifecycles, and handle encryption schemes (e.g., Customer-Managed Encryption Keys or External Key Managers).
• Design and deploy environments like Confidential VMs and Trusted Execution Environments (TEEs) to protect data while it is in use.
• Design robust, reliable data-centric security and authentication protocols across global, hyper-scale cloud data centers. Implement Client-Side Encryption (CSE) for Google Workspace and ensure mutually authenticated TLS 1.3 communications.

Job description

CACI International Inc in the United States is seeking a Senior Cloud Security & Cryptography Engineer to advance cryptographic systems for large-scale cloud infrastructure supporting sensitive operations. The role emphasizes secure key management, cryptographic integrity, and high-availability solutions.

The position requires a TS/SCI clearance, extensive experience in security-focused software development, and hands-on work with PKI, TLS, and cloud IAM integrations.