Senior Cloud Security & Cryptography Engineer – TS/SCI

CACI; United States; On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible time off

Learning resources

Job summary

CACI is seeking a Senior Cloud Security & Cryptography Engineer to lead cryptographic solutions in a large-scale cloud environment serving SOCEUR HTAP. You will develop secure KMS-backed services, cryptographic key management, and enterprise security platforms for critical data.

You'll work across cloud APIs, OS, and hardware, architect HSM-backed services, implement TEEs, and ensure TLS 1.3 mutual authentication. A TS/SCI clearance and 8+ years of related experience are required.

Qualifications

• BS in Computer Science or equivalent practical experience in data structures and software security.
• 8+ years of industry experience in software development or cloud infrastructure engineering.
• 5+ years of advanced proficiency in languages such as Python, C, C++, Java, or Go.
• 5+ years' experience designing and developing large-scale, distributed infrastructure or highly secure operating environments.
• 5+ years' experience with cryptographic algorithms, PKI, TLS/SSL, authentication protocols, and threat modeling.
• 3+ years of Google Cloud Identity, OAuth/SAML, Keycloak, and Google Workspace SSO integration.
• At least 3 years of experience in Agile team roles supporting security and cryptographic projects.

Responsibilities

• Build foundational backend services used by Cloud customers and internal systems to secure, rotate, and manage cryptographic keys (e.g., Cloud Key Management Service).
• Work across all layers of the production stack, from high-level Cloud APIs to low-level OS and hardware.
• Architect and scale HSM-backed services to meet enterprise compliance and high availability requirements.
• Design cryptographic and secret management solutions, manage key lifecycles, and handle encryption schemes (e.g., Customer-Managed Encryption Keys or External Key Managers).
• Design and deploy environments like Confidential VMs and TEEs to protect data in use.
• Design robust data-centric security and authentication protocols across global cloud data centers; implement Client-Side Encryption for Google Workspace and mutual TLS 1.3.

Skills

Python

C++

Java

Go

Cloud infrastructure

Cryptography

PKI

TLS/SSL

Education

BS in Computer Science

Tools

Terraform

GCP

KMS

HSM

Job description

CACI is seeking a Senior Cloud Security & Cryptography Engineer to lead cryptographic solutions in a large-scale cloud environment serving SOCEUR HTAP. You will develop secure KMS-backed services, cryptographic key management, and enterprise security platforms for critical data.

You'll work across cloud APIs, OS, and hardware, architect HSM-backed services, implement TEEs, and ensure TLS 1.3 mutual authentication. A TS/SCI clearance and 8+ years of related experience are required.