Senior Security Engineer – Cryptographic Strategy & Post-Quantum Readiness; PQR

Senior Security Engineer – Cryptographic Strategy & Post-Quantum Readiness (PQR)

Company:  BLS
360

Location:

Remote – India

Experience:

8+ Years

Employment Type:

Full-Time

About BLS
360
BLS
360  is a cybersecurity and digital transformation company focused on Identity & Access Management (IAM), Identity Governance & Administration (IGA), privileged access, cloud security, and enterprise security transformation.
We are looking for a  Senior Security Engineer – Cryptographic Strategy & Post-Quantum Readiness (PQR)  to join our team and help transform enterprise cryptographic strategy into scalable, automated, and operational security services.

About the Role
This is a  hands-on engineering role  focused on enterprise cryptographic services, certificate lifecycle automation, cryptographic visibility, and  Post-Quantum Readiness (PQR) .
The engineer will work closely with platform, application, infrastructure, cloud, Dev Sec Ops , and security teams to enable  self-service certificate management through Digi Cert , automate certificate lifecycle processes, establish a  Cryptographic Bill of Materials (CBOM) , and build the foundations required for future  Post-Quantum Cryptography (PQC)  migration.
The ideal candidate combines strong security engineering fundamentals with practical experience in  PKI, certificates, TLS/SSL, automation, cloud, APIs, CI/CD, and cryptographic technologies .

Key Responsibilities

· Implement enterprise cryptographic strategy through practical security platforms, services, automation, engineering standards, and operational controls.

· Design, implement, and expand  Digi Cert self-service capabilities  for application and infrastructure teams.

· Build secure workflows for certificate  request, approval, issuance, renewal, revocation, and reporting .

· Automate enterprise certificate lifecycle management across applications, infrastructure, cloud, and other technology platforms.

· Integrate certificate automation with  CI/CD pipelines, cloud platforms, Infrastructure-as-Code, secrets management, load balancers, APIs, and application platforms .

· Establish and maintain a  Cryptographic Bill of Materials (CBOM)  covering cryptographic assets, certificates, algorithms, keys, protocols, libraries, dependencies, ownership, business criticality, and lifecycle status.

· Support cryptographic discovery and inventory across  applications, endpoints, networks, cloud services, PKI environments, and third-party technologies .

· Identify and remediate certificate expiration risks, weak or legacy cryptographic configurations, hard-coded cryptographic dependencies, and crypto-agility gaps.

· Develop reusable implementation patterns, automation scripts, runbooks, dashboards, technical documentation, and operational controls.

· Support  Post-Quantum Readiness (PQR)  and  Post-Quantum Cryptography (PQC)  initiatives, including readiness assessments, migration planning, hybrid cryptography pilots, and technology evaluations.

· Track implementation progress, technical dependencies, risks, and remediation activities and escalate blockers when necessary.

· Provide hands-on technical guidance to application, infrastructure, cloud, and security teams adopting enterprise cryptographic services.

· Collaborate with senior engineers and architects to evaluate emerging cryptographic technologies, standards, and implementation approaches.

Required Qualifications

· 8+ years  of hands-on experience in security engineering, platform engineering, Dev Sec Ops , cloud engineering, infrastructure engineering, or application engineering.

· Strong practical experience with  PKI, X.509 certificates, TLS/SSL, Certificate Authorities (CA), certificate lifecycle management, and key management .

· Experience administering,…