Cryptography Engineer - Product Security, Cybersecurity (Remote)

CrowdStrike is a global leader in cybersecurity dedicated to stopping breaches and protecting modern organizations. The role of Engineer III in Cybersecurity focuses on designing, implementing, and maintaining cryptographic solutions to ensure the security and integrity of products and platforms. This position involves managing the TLS lifecycle, overseeing code signing processes, and integrating Hardware Security Modules, while also providing technical leadership and mentoring junior engineers.

Responsibilities:

• Design, implement, and maintain cryptographic solutions for our products and platforms at scale – ensuring performance and reliability across a large number of services and users
• Manage the entire TLS lifecycle, including certificate management, key rotation, and protocol upgrades
• Develop and oversee code signing processes to ensure the authenticity and integrity of our software
• Integrate and manage Hardware Security Modules (HSMs) to enhance the security of cryptographic keys and operations
• Develop scripting and automation solutions to streamline cryptographic operations and integrations
• Lead and manage projects involving cross-functional stakeholders, ensuring alignment and successful delivery while building deep relationships with product and engineering leaders
• Stay up-to-date with the latest advancements in cryptography and cybersecurity to continuously improve our security posture
• Provide technical leadership and participate in interviewing new talent

Requirements:

• 4+ years of professional experience applying Cryptography knowledge in technical or software company
• Deep expertise in TLS lifecycle management, including Certificate Authority (CA) management, certificate operations, and key rotation
• Familiarity with code signing processes and tools
• Proven experience with Hardware Security Modules (HSMs) and their integration
• In-depth knowledge of cryptographic algorithms, protocols, and standards (e.g., AES, RSA, ECC, SHA-2)
• Proficiency in scripting and automation to ease cryptographic operations and integrations (e.g., Python, Bash, Go)
• Experience with Cloud-scale, business-critical Linux and/or other Unix-like variant environments
• Experience operating at scale and complexity in services and users