Cryptographic Software Engineer

MPCH is looking for a hands‑on Cryptographic Software Engineer to join our Engineering team, responsible for building and maintaining the cryptographic key management infrastructure that underpins our security architecture. You will design and implement KMS drivers, REST and gRPC APIs, and low‑level system components that interface directly with hardware security modules and cloud key management services.

This role sits at the intersection of systems programming, cryptographic engineering, and distributed infrastructure. You will be expected to work across the full depth of the KMS stack — from PKCS#11 driver development and protobuf API contracts to key lifecycle workflows and secure CI/CD pipelines. AI‑assisted development is a normal part of how our team operates; candidates should be comfortable leveraging AI tools to accelerate development, improve code quality, and support documentation and design work.

• Design, implement, and maintain KMS drivers and provider plugins for integration with hardware and software security modules
• Build and expose REST and gRPC APIs for key management operations including key generation, rotation, wrapping/unwrapping, signing, and verification
• Develop backend services and low-level system components in C, Golang, and Java that interface with cryptographic hardware and HSMs via PKCS#11, JCE, or vendor‑specific SDKs
• Implement key lifecycle management workflows: creation, storage, distribution, rotation, suspension, and destruction
• Write protocol buffer (protobuf) definitions and maintain gRPC service contracts across service versions
• Contribute to secure API gateway and mTLS configurations for service‑to‑service authentication
• Follow a security‑first development approach with rigorous threat modelling, TDD best practices, and high test coverage
• Use CI/CD pipelines for automated testing and secure code releases in cloud and on‑prem environments
• Identify, triage, and remediate security vulnerabilities and software bugs across the KMS stack
• Contribute to technical designs, architecture documentation, and cryptographic implementation reviews
• Participate in frequent, high‑quality code reviews with a focus on security and correctness
• Design and maintain efficient SQL/No
  
  SQL schemas for key metadata and audit logging in cloud and local development environments
• Leverage AI coding assistants as a standard part of the development workflow — for code generation, review, debugging, test coverage, and documentation

• Work closely with security engineers, platform teams, and compliance stakeholders to translate key management requirements into robust technical implementations
• Participate in Agile processes including sprint planning, refinement sessions, retrospectives, and daily stand‑ups
• Communicate effectively to share progress, blockers, and solutions — particularly when surface area spans cryptographic, hardware, and API layers
• Demonstrate ownership and a bias for action on assigned tasks and the team's backlog
• Proactively resolve blockers and collaborate with teammates across distributed time zones
• Exhibit active listening skills and model security‑conscious engineering behaviours

• 3–5 years of relevant experience in systems, security, or backend development
• Strong proficiency in C, Golang, and/or Java for systems and backend development
• Hands‑on experience designing and building REST and gRPC APIs, including protobuf schema design and versioning
• Experience developing drivers or provider plugins for cryptographic hardware or KMS systems (e.g., PKCS#11, JCE providers, vendor HSM SDKs)
• Solid understanding of cryptographic primitives and protocols: symmetric/asymmetric encryption, key wrapping, digital signatures, TLS/mTLS, PKI
• Experience with SQL and No
  
  SQL databases (e.g., Postgre
  
  SQL, MySQL, Mongo
  
  DB) for audit trail and key metadata storage
• Understanding of version control systems (e.g., Git) and CI/CD pipelines
• Ability to engage deeply with cryptographic specifications and standards (e.g., NIST, KMIP, FIPS 140‑2/3)
• Comfortable using AI‑assisted development tools (e.g., Git Hub Copilot, Claude, ChatGPT) as a regular part of…