{"schemaVersion":"jobsearcher.job.v1","id":"7e4e10007fdf7de8cd6897fc","url":"https://jobsearcher.com/jobs/7e4e10007fdf7de8cd6897fc","canonicalUrl":"https://jobsearcher.com/jobs/7e4e10007fdf7de8cd6897fc","title":"Lead Security & Cryptography Engineer","description":"Company: Aadhcode Solutions Pvt Ltd\n\nJob Description: Lead Security & Cryptography Engineer\n\nExperience: 8+ years\n\nLocation: Remote\n\nAbout the role\n\nAadhcode is building a transaction-authorization platform for banks, payment providers and government agencies. As the named security and cryptography lead from day one, you'll own the platform's cryptographic design and take it through a bank pilot and an independent third-party security review.\n\nWhat you'll do\n\nOwn the cryptographic architecture: signing, key hierarchy, algorithm choices and the decision records behind them.\n\nDesign and implement key management on AWS CloudHSM (PKCS#11), including key ceremonies, rotation, backup and disaster recovery.\n\nBuild signed approval receipts (JWS/COSE) and an offline verifier that auditors can run without our systems.\n\nVerify device attestation on the server: Apple App Attest, Android Key Attestation/StrongBox and Play Integrity, plus FIDO2/WebAuthn for desktop.\n\nDesign the tamper-evident audit ledger with the backend team.\n\nSet our post-quantum strategy (ML-DSA/Dilithium readiness) and the ability to swap algorithms without breaking stored records.\n\nLead threat modelling and the security gates in the pipeline (SAST/DAST/SBOM), and act as the main contact for the external security review.\n\nTurn compliance requirements into concrete technical controls with our compliance engineer: PSD2 strong customer authentication, PCI DSS, SOC 2 and FedRAMP readiness.\n\nMentor backend engineers moving from Java to Go on secure coding practices.\n\nWhat you'll bring\n\n8+ years in security engineering, with at least 3 designing production cryptographic systems. Implementing protocols counts; only calling libraries doesn't.\n\nHands-on HSM experience with CloudHSM, Thales/Luna or similar, including PKCS#11 and real key ceremonies.\n\nDeep working knowledge of ECDSA/EdDSA, JWS/COSE, X.509 and certificate chains, hashing and Merkle structures, and constant-time implementation concerns.\n\nExperience with mobile secure hardware (Secure Enclave, StrongBox) and attestation flows.\n\nStrong Go; Rust is a strong plus.\n\nExperience taking systems through external penetration tests or security reviews in fintech, banking or government.\n\nNice to have\n\nPost-quantum migration work (ML-DSA, hybrid signatures).\n\nPSD2 dynamic linking, FFIEC or PCI DSS experience.\n\nStandards contributions (IETF, FIDO Alliance, W3C) or open-source crypto work.\n\nApplication Question(s):\n* Q1. What is your Total Experiece?\n* Q2. What is your Relevant Experience?\n* Q3. What is your Notice Period?\n* Q4. What is your Current CTC?\n* Q5. What is your Expected CTC?\n\nExperience:\n* lead Security & Cryptography: 8 years (Required)\n\nWork Location: Remote","company":"Aadhcode Solutions","rawCompany":"aadhcode solutions","city":"Myrtle Point","state":"OR","isRemote":false,"isActive":false,"createdAt":"2026-10-21T11:51:32.476Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Lead Security & Cryptography Engineer","description":"Company: Aadhcode Solutions Pvt Ltd\n\nJob Description: Lead Security & Cryptography Engineer\n\nExperience: 8+ years\n\nLocation: Remote\n\nAbout the role\n\nAadhcode is building a transaction-authorization platform for banks, payment providers and government agencies. As the named security and cryptography lead from day one, you'll own the platform's cryptographic design and take it through a bank pilot and an independent third-party security review.\n\nWhat you'll do\n\nOwn the cryptographic architecture: signing, key hierarchy, algorithm choices and the decision records behind them.\n\nDesign and implement key management on AWS CloudHSM (PKCS#11), including key ceremonies, rotation, backup and disaster recovery.\n\nBuild signed approval receipts (JWS/COSE) and an offline verifier that auditors can run without our systems.\n\nVerify device attestation on the server: Apple App Attest, Android Key Attestation/StrongBox and Play Integrity, plus FIDO2/WebAuthn for desktop.\n\nDesign the tamper-evident audit ledger with the backend team.\n\nSet our post-quantum strategy (ML-DSA/Dilithium readiness) and the ability to swap algorithms without breaking stored records.\n\nLead threat modelling and the security gates in the pipeline (SAST/DAST/SBOM), and act as the main contact for the external security review.\n\nTurn compliance requirements into concrete technical controls with our compliance engineer: PSD2 strong customer authentication, PCI DSS, SOC 2 and FedRAMP readiness.\n\nMentor backend engineers moving from Java to Go on secure coding practices.\n\nWhat you'll bring\n\n8+ years in security engineering, with at least 3 designing production cryptographic systems. Implementing protocols counts; only calling libraries doesn't.\n\nHands-on HSM experience with CloudHSM, Thales/Luna or similar, including PKCS#11 and real key ceremonies.\n\nDeep working knowledge of ECDSA/EdDSA, JWS/COSE, X.509 and certificate chains, hashing and Merkle structures, and constant-time implementation concerns.\n\nExperience with mobile secure hardware (Secure Enclave, StrongBox) and attestation flows.\n\nStrong Go; Rust is a strong plus.\n\nExperience taking systems through external penetration tests or security reviews in fintech, banking or government.\n\nNice to have\n\nPost-quantum migration work (ML-DSA, hybrid signatures).\n\nPSD2 dynamic linking, FFIEC or PCI DSS experience.\n\nStandards contributions (IETF, FIDO Alliance, W3C) or open-source crypto work.\n\nApplication Question(s):\n* Q1. What is your Total Experiece?\n* Q2. What is your Relevant Experience?\n* Q3. What is your Notice Period?\n* Q4. What is your Current CTC?\n* Q5. What is your Expected CTC?\n\nExperience:\n* lead Security & Cryptography: 8 years (Required)\n\nWork Location: Remote","datePosted":"2026-10-21T11:51:32.476Z","dateModified":"2026-10-21T11:51:32.476Z","hiringOrganization":{"@type":"Organization","name":"Aadhcode Solutions","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Myrtle Point","addressRegion":"OR","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"7e4e10007fdf7de8cd6897fc"},"url":"https://jobsearcher.com/jobs/7e4e10007fdf7de8cd6897fc"}}