Cloud Cryptography PKI Engineer

Position: Cloud Cryptography Engineer  

Location: Remote

Duration: 12 Months

Cloud Cryptography & PKI Engineer

We are seeking a hands-on cloud engineer with experience implementing cryptography, encryption, and Public Key Infrastructure (PKI) across AWS, Microsoft Azure, and Google Cloud Platform (Google Cloud Platform). This role will focus on protecting data at rest and in transit and integrating cryptographic services into cloud platforms, applications, and enterprise services.

Implement and manage encryption for data at rest and data in transit across AWS, Azure, and Google Cloud Platform.
Design, deploy, and maintain PKI, certificates, keys, and certificate lifecycle management.
Configure cloud-native key management services, including AWS KMS/CloudHSM, Azure Key Vault/Managed HSM, and Google Cloud KMS/HSM.
Integrate encryption, certificates, and cryptographic controls into applications, APIs, databases, storage, and cloud services.
Implement and support TLS/mTLS, certificate issuance, rotation, renewal, and revocation.
Work with application, cloud, security, and infrastructure teams to implement cryptographic requirements.
Troubleshoot encryption, certificate, key management, and PKI-related issues.
Document architectures, configurations, operational procedures, and key-management processes.
Hands-on engineering experience with AWS, Azure, and/or Google Cloud Platform.
Practical experience with PKI, TLS, encryption, certificates, and key management.
Experience implementing encryption for applications, databases, storage, APIs, and cloud workloads.
Familiarity with HSMs, secrets management, key rotation, and certificate lifecycle management.
Experience with automation tools such as Terraform, scripting, CI/CD, or infrastructure-as-code.
Understanding of security best practices for protecting cryptographic keys and sensitive data.