Client: US technology company (digital identity and payments infrastructure) · Location: remote, LATAM, US Eastern overlap · Level: senior · Engagement: full-time contractor
You will own applied cryptography across the product: key management, protocol design review and the migration plan to post-quantum algorithms.
What you will do
- Design and operate key management on HSMs and cloud KMS, including rotation, escrow and ceremonies
- Review protocol and feature designs for correct use of encryption, signatures and key exchange
- Run PKI: certificate authorities, issuance automation and mTLS between services
- Build the crypto inventory and lead the roadmap to NIST post-quantum standards (ML-KEM, ML-DSA)
- Maintain internal crypto libraries and guidance so product teams do not roll their own
- Support audits and certifications such as FIPS 140-3, PCI DSS and SOC 2
What you bring
- 6+ years in security engineering, 3+ focused on applied cryptography
- Solid command of modern primitives and protocols (AES-GCM, ECC, TLS 1.3, Noise, JOSE)
- Hands-on HSM and KMS experience (Thales, AWS CloudHSM, AWS KMS or equivalent)
- Coding in Go, Rust or C, with secure coding and code review experience
- Ability to explain cryptographic risk to non-specialists in English
Nice to have
- Threshold signatures, MPC or zero-knowledge proof experience
- Degree or research background in cryptography
- Contributions to open-source crypto libraries
Originally posted on Himalayas
Time-zone restrictions (UTC offsets): -8, -7, -6, -5, -4, -3, -2
Eligible locations: Argentina, Bolivia, Brazil, Chile, Colombia, Costa Rica, Cuba, Dominican Republic, Ecuador, El Salvador, Guatemala, Haiti, Honduras, Mexico, Nicaragua, Panama, Paraguay, Peru, Uruguay, Venezuela