Staff Cryptography Engineer — Post-Quantum Readiness

SoFi; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Job summary

SoFi is seeking a Staff Cryptography Engineer to lead enterprise readiness for post-quantum cryptography and long-term cryptographic resilience. This cross-functional role collaborates with security, engineering, infrastructure, product, and business teams to assess and strengthen cryptographic controls across the enterprise.

The ideal candidate has deep applied cryptography expertise and strong architectural judgment to drive crypto modernization, inventory creation, and secure migration

Qualifications

• 8+ years of security engineering, product security, applied cryptography, or related field.
• Experience with post-quantum cryptography, crypto-agility, or cryptographic migration planning.
• Deep hands-on expertise in applied cryptography and secure protocol design (SSL/TLS, mTLS, M2M).
• Experience building/maintaining enterprise crypto controls in cloud/distributed environments.
• Strong understanding of public cloud cryptographic implementations.
• Ability to review architectures and identify cryptographic risks and secure alternatives.
• Experience creating security standards, inventories, roadmaps, or enterprise initiatives.
• Strong communication skills to explain complex cryptographic concepts.

Responsibilities

• Lead efforts to assess and improve SoFi’s cryptographic posture, focusing on post-quantum readiness and crypto-agility.
• Build and maintain an inventory of cryptographic assets (keys, certificates, algorithms, protocols, libraries).
• Collaborate with product, engineering, infrastructure, cloud, and security teams to prioritize migrations and remediation.
• Provide guidance on SSL/TLS, PKI, key management, encryption, and secure protocol usage.
• Define cryptographic standards, design patterns, and implementation guidance for teams.
• Evaluate risks, including quantum-resistant migrations and certificate lifecycle management.
• Review architectures to identify cryptographic risks and propose practical improvements.
• Translate cryptographic concepts into roadmaps and decisions for stakeholders.
• Drive cross-functional execution with clear ownership and timelines.
• Support security assurance activities like threat modeling and control validation.
• Stay current on post-quantum developments and translate into actionable plans.

Skills

Post-quantum cryptography

Crypto-agility

SSL/TLS

PKI

Key management

Cloud security

Security architecture

Threat modeling

Communicating complex concepts

Education

Bachelor's degree

Tools

HSMs

KMS

Secrets management

PKI programs

Job description

SoFi is seeking a Staff Cryptography Engineer to lead enterprise readiness for post-quantum cryptography and long-term cryptographic resilience. This cross-functional role collaborates with security, engineering, infrastructure, product, and business teams to assess and strengthen cryptographic controls across the enterprise.

The ideal candidate has deep applied cryptography expertise and strong architectural judgment to drive crypto modernization, inventory creation, and secure migration