Implementation Engineer — Cryptographic Strategy & Post-Quantum Readiness
New
L
LCI-Lawinger ConsultingCybersecurity
Remote, IndiaFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5–10 years
- Required Skills
- AWSPythonCI/CDRESTful APIsTerraform
Requirements
- 5–10 years of hands-on experience in security engineering, platform engineering, DevSecOps, cloud engineering, infrastructure engineering, or application engineering.
- Practical experience with PKI, X.509 certificates, TLS/SSL, certificate authorities, certificate lifecycle management, and key-management concepts.
- Experience administering, integrating, or automating enterprise certificate-management platforms; DigiCert experience is strongly preferred.
- Experience building automation with Python, PowerShell, Bash, Java, Go, or similar languages.
- Familiarity with REST APIs, CI/CD pipelines, Git-based workflows, Terraform, Ansible, containers, and/or Kubernetes.
- Experience with AWS, Azure, and/or Google Cloud, including certificate, key-management, secrets, identity, and network-security services.
- Understanding of applied cryptography, including encryption, hashing, digital signatures, key exchange, PKI, protocols, and cryptographic libraries.
- Ability to troubleshoot certificate, TLS, trust-store, key, and cryptographic configuration issues in production environments.
- Experience implementing certificate self-service portals, automation, ACME/SCEP/EST workflows, or certificate lifecycle integrations is preferred.
- Experience creating or maintaining a CBOM, cryptographic inventory, software bill of materials, configuration-management database, or asset-discovery program is preferred.
- Familiarity with Post-Quantum Cryptography, Post-Quantum Readiness, crypto-agility, ML-KEM, and ML-DSA is preferred.
- Experience with HSMs, cloud KMS services, secrets-management platforms, code signing, mTLS, API security, or enterprise PKI modernization is preferred.
- Experience in a large, regulated, or highly distributed enterprise environment is preferred.
Responsibilities
- Implement enterprise cryptographic strategy through platforms, services, automation, and engineering standards.
- Enable DigiCert self-service certificate request, approval, issuance, renewal, revocation, and reporting workflows.
- Design, build, and support automated certificate lifecycle management across enterprise environments.
- Integrate certificate automation with CI/CD pipelines, cloud platforms, infrastructure-as-code, secrets-management tools, load balancers, APIs, and application platforms.
- Establish and maintain a Cryptographic Bill of Materials (CBOM) covering cryptographic assets and their ownership, criticality, and lifecycle status.
- Support cryptographic discovery and inventory across applications, endpoints, networks, cloud services, PKI, and third-party technologies.
- Identify and remediate certificate expiration risks, weak or legacy cryptographic configurations, hard-coded dependencies, and crypto-agility gaps.
- Develop reusable implementation patterns, runbooks, technical documentation, dashboards, and operational controls.
- Partner with senior engineers and architects on post-quantum readiness and cryptography initiatives, including assessments, migration planning, pilots, and technology evaluations.
- Track implementation progress, dependencies, risks, and remediation status; escalate blockers and provide technical guidance to adopting teams.
View Full Description & ApplyYou'll be redirected to the employer's site
