[Remote] Cloud Cryptography & PKI Engineer

Note: The job is a remote job and is open to candidates in USA. Sriven Systems Inc. is seeking a Cloud Cryptography & PKI Engineer for a 12-month remote engagement. The role will implement and manage encryption, PKI, certificates, keys, and cloud-native key management services across AWS, Azure, and GCP, while integrating cryptographic controls into applications and infrastructure. The engineer will also support TLS/mTLS, troubleshoot cryptographic issues, collaborate with technical teams, and document security architectures and procedures.

Responsibilities

• Implement and manage encryption for data at rest and data in transit across AWS, Azure, and GCP
• Design, deploy, and maintain PKI, certificates, keys, and certificate lifecycle management
• Configure cloud-native key management services, including AWS KMS/CloudHSM, Azure Key Vault/Managed HSM, and Google Cloud KMS/HSM
• Integrate encryption, certificates, and cryptographic controls into applications, APIs, databases, storage, and cloud services
• Implement and support TLS/mTLS, certificate issuance, rotation, renewal, and revocation
• Work with application, cloud, security, and infrastructure teams to implement cryptographic requirements
• Troubleshoot encryption, certificate, key management, and PKI-related issues
• Document architectures, configurations, operational procedures, and key-management processes

Skills

• Implement and manage encryption for data at rest and data in transit across AWS, Azure, and GCP
• Design, deploy, and maintain PKI, certificates, keys, and certificate lifecycle management
• Configure cloud-native key management services, including AWS KMS/CloudHSM, Azure Key Vault/Managed HSM, and Google Cloud KMS/HSM
• Integrate encryption, certificates, and cryptographic controls into applications, APIs, databases, storage, and cloud services
• Implement and support TLS/mTLS, certificate issuance, rotation, renewal, and revocation
• Work with application, cloud, security, and infrastructure teams to implement cryptographic requirements
• Troubleshoot encryption, certificate, key management, and PKI-related issues
• Document architectures, configurations, operational procedures, and key-management processes
• Hands-on engineering experience with AWS, Azure, and/or GCP
• Practical experience with PKI, TLS, encryption, certificates, and key management
• Experience implementing encryption for applications, databases, storage, APIs, and cloud workloads
• Familiarity with HSMs, secrets management, key rotation, and certificate lifecycle management
• Experience with automation tools such as Terraform, scripting, CI/CD, or infrastructure-as-code
• Understanding of security best practices for protecting cryptographic keys and sensitive data

Benefits

• Remote work arrangement

Company Overview

Company H1B Sponsorship