Senior Software Engineer

Pqshield; United States; Hybrid; USD 190,000 - 260,000; Full time

Benefits offered by this job

Share option scheme

Hybrid working arrangements

Working-from-home budget

Private health insurance

Job summary

Pqshield seeks a senior cryptography software engineer to design and implement secure cryptographic software for next‑gen embedded platforms, bridging classical and post‑quantum algorithms in a RISC‑V based subsystem IP.

You will work across hardware and software targets (ARM, FPGA) to optimize performance, mitigate side‑channel risks, and ensure compliance with standards such as GlobalPlatform, ARM PSA, and Linux kernel drivers.

Qualifications

• Advanced degree in CS or math with cryptography background.
• Proficient in C and assembly for bare-metal environments.
• Knowledge of classical and PQC algorithms and NIST/FIPS standards.
• Strong debugging and problem-solving to turn research into production code.

Responsibilities

• Design, implement, and test classical and post-quantum cryptographic primitives with focus on correctness and performance.
• Develop cryptographic software on FPGAs and hardware coprocessors, targeting ARM and RISC-V.
• Harden implementations against side-channel and fault injection through constant-time design.
• Integrate with APIs and drivers including GlobalPlatform, ARM PSA, and Linux kernel drivers.
• Participate in benchmarking, design reviews, and security analyses (static/dynamic/formal).
• Support security standards compliance and participate in threat modeling.

Skills

Cryptography

C programming

Assembly

Post-quantum cryptography

Bare-metal development

Debugging

Education

Master's or PhD in CS/Math

Tools

FPGAs

RISC-V

ARM

Linux kernel drivers

Job description

Role overview

A senior engineering role focused on designing and implementing cryptographic software for next-generation secure embedded platforms. The position sits at the intersection of classical and post-quantum cryptography, low-level systems programming, and hardware-aware security engineering, contributing to a RISC-V-based subsystem IP with advanced cryptographic algorithm support.

Responsibilities

• Design, implement, and test classical and post-quantum cryptographic primitives, with emphasis on functional correctness, interoperability, and optimized performance across software environments.
• Develop and integrate cryptographic solutions on hardware platforms such as FPGAs and hardware cryptographic coprocessors, focusing on acceleration and secure implementation on ARM and RISC-V architectures.
• Harden implementations against side-channel analysis, fault injection attacks, and other physical or logical threats through constant-time design and related countermeasures.
• Integrate with cryptographic system and application APIs, including standards such as GlobalPlatform, ARM Platform Security Architecture, and Linux kernel drivers.
• Contribute to performance benchmarking, code and design review meetings, and security-focused reviews including static, dynamic, and formal-method-based analysis.
• Support compliance with relevant security standards and participate in threat modeling and risk assessments related to cryptographic software.

Requirements

• Master's or PhD degree in computer science, mathematics, or a related field, with a strong background in cryptography or computer security.
• Proficiency in C and Assembly, with a focus on resource-constrained, bare-metal environments.
• Familiarity with classical and post-quantum cryptographic algorithms, including NIST PQC candidates, and a solid understanding of NIST and FIPS publications and compliance requirements.
• Strong problem-solving and debugging skills, with the ability to translate cryptographic research into production-grade implementations.

Nice to have

• Experience with Rust and with secure coding practices for embedded targets.
• Hands-on familiarity with side-channel attack vectors (timing, power, EM) and corresponding mitigation strategies.
• Working knowledge of security certification frameworks such as FIPS 140-3, SESIP, PSA Certified, or Common Criteria.
• Ability to read and implement specifications directly from cryptographic research papers.

Benefits and work setup

• Competitive compensation including a share option scheme.
• Flexible and hybrid working arrangements, plus a working-from-home budget.
• Private health insurance covering the employee and their family.
• 25 days of annual leave in addition to bank holidays and two wellness weeks.
• 50% gym membership discount.

An inclusive employer committed to equal opportunity across gender identity, ethnicity, sexual orientation, disability, and age.