Staff Cryptography Engineer — Post-Quantum Readiness Lead

SoFi; Seattle (WA); On-site; USD 170,000 - 250,000; Full time

Job summary

SoFi is seeking a Staff Cryptography Engineer in Seattle to lead enterprise readiness for post-quantum cryptography and long-term cryptographic resilience. You will partner with security, engineering, infrastructure, product, and business teams to modernize cryptographic controls and drive crypto-agile migrations across the enterprise.

The ideal candidate has deep applied cryptography expertise, strong engineering judgment, and a track record of guiding complex security initiatives in ambiguous

Qualifications

• 8+ years in security engineering, cryptography, or related security discipline.
• Experience with post-quantum crypto, crypto-agility, or cryptographic migration planning.
• Hands-on cryptography expertise: algorithms, secure protocols (TLS/mTLS), and lifecycle management of enterprise-grade solutions (HSMs, KMS, secrets, PKI).
• Experience in production environments across cloud, distributed systems, APIs, or enterprise platforms.

Responsibilities

• Lead assessment and improvement of enterprise cryptographic posture, focusing on post-quantum readiness and crypto-agility.
• Build and maintain an inventory of cryptographic assets (keys, certificates, algorithms, libraries).
• Collaborate with product/engineering/infrastructure to identify dependencies and prioritize migrations.
• Provide guidance on SSL/TLS, PKI, key management, encryption, and secure protocol usage.
• Document cryptographic standards, design patterns, and implementation guidance.

Skills

Post-quantum crypto

Crypto agility

Key management

TLS/mTLS

PKI

HSMs

Security architecture

Cloud security

Education

Bachelor’s degree in CS/Cybersecurity/Engineering

Tools

PKI programs

Job description

SoFi is seeking a Staff Cryptography Engineer in Seattle to lead enterprise readiness for post-quantum cryptography and long-term cryptographic resilience. You will partner with security, engineering, infrastructure, product, and business teams to modernize cryptographic controls and drive crypto-agile migrations across the enterprise.

The ideal candidate has deep applied cryptography expertise, strong engineering judgment, and a track record of guiding complex security initiatives in ambiguous