[Remote] Java Security Engineer - Cryptography, PKI & Cloud Key Management
Note: The job is a remote job and is open to candidates in USA. Dice is hiring a Senior Java Security Engineer to build and secure Java applications using cryptography, PKI, certificates, and cloud key-management technologies. The role focuses on implementing encryption and authentication solutions, integrating security platforms, conducting threat modeling and secure code reviews, and resolving complex security issues.
Responsibilities
- Design and develop secure Java applications using industry-standard cryptographic practices
- Implement encryption/decryption, hashing, digital signatures, key generation, and key-management mechanisms
- Work extensively with JCA/JCE and Java security providers
- Implement and manage AES, RSA, ECC and other cryptographic algorithms appropriately
- Design and integrate PKI infrastructure, X.509 certificates, certificate chains, CSRs, keystores, truststores, and certificate lifecycle management
- Implement and troubleshoot SSL/TLS configurations, mutual TLS (mTLS), cipher suites, and certificate validation
- Develop secure authentication and authorization mechanisms using Spring Security, OAuth2, OpenID Connect, and JWT
- Integrate applications with HashiCorp Vault, AWS KMS, HSMs, or other key-management platforms
- Design secure approaches for encryption of data at rest and in transit
- Participate in security architecture and threat-modeling activities
- Conduct secure code reviews and identify cryptographic and application-security vulnerabilities
- Establish and enforce secure coding standards and cryptographic best practices
- Collaborate with application, cloud, DevOps, and security teams to implement enterprise security controls
- Troubleshoot complex certificate, TLS, authentication, encryption, and key-management issues
- Ensure solutions align with organizational security policies and relevant industry standards
Skills
- 5–7 years in Java development with strong hands-on experience in application security, cryptography, PKI, and secure software development
- We are looking for a Senior Java Security Engineer with strong expertise in Java Cryptography Architecture (JCA), Java Cryptography Extension (JCE), PKI, X.509 certificates, encryption, digital signatures, and secure application development
- The ideal candidate will have hands-on experience implementing cryptographic solutions using AES, RSA, ECC, SSL/TLS, certificate management, OAuth2/JWT, and security frameworks such as Spring Security
- * Strong Java programming experience
- * JCA / JCE
- * Java KeyStore (JKS), PKCS#12, truststores and keystores
- * Java security providers and cryptographic APIs
- * Secure coding and application security principles
- * Symmetric encryption: AES
- * Asymmetric cryptography: RSA, ECC
- * Hashing: SHA-2/SHA-3 and related concepts
- * Digital signatures and signature verification
- * Key generation, storage, rotation, and lifecycle management
- * Encryption at rest and encryption in transit
- * Strong understanding of cryptographic primitives, algorithms, modes, padding, IVs/nonces, and randomness
- Experience with cloud-based key management solutions such as AWS KMS and HashiCorp Vault is highly desirable
Company Overview
Company H1B Sponsorship