Post‑Quantum Research & PKI Cryptography Engineer

Securetron is seeking a Post‑Quantum Research & PKI Cryptography Engineer to lead research, prototyping, and implementation of quantum‑resistant cryptographic workflows within our PKI automation stack. You will work across PQC algorithms, hybrid key exchange, certificate formats, CBOM generation, and crypto‑agility frameworks to ensure customers can transition safely and efficiently.
This role blends deep cryptographic research, hands‑on engineering, and standards‑driven implementation.
Key Responsibilities
PQC Algorithm Research — Evaluate NIST‑selected PQC algorithms (ML‑KEM, ML‑DSA) and their applicability to enterprise PKI and certificate issuance.
Hybrid Crypto Design — Prototype hybrid classical/PQC certificate chains, key exchange mechanisms, and dual‑layer signing workflows.
PKI Integration — Implement PQC‑ready certificate templates, CSR formats, and enrollment flows across Securetron’s PKI Trust Manager.
Crypto‑Agility Frameworks — Design mechanisms enabling rapid algorithm rotation, policy enforcement, and automated migration.
CBOM Generation — Build tooling to generate and validate Cryptographic Bills of Materials for enterprise environments.
Standards Alignment — Track NIST, ETSI, IETF, CAB Forum, and browser‑root program requirements.
Performance & Security Testing — Benchmark PQC algorithms, validate interoperability, and assess operational impact.
Developer Enablement — Produce documentation, reference implementations, and internal guidance for engineering teams.
Required Qualifications
Strong background in applied cryptography, PKI, or certificate lifecycle management.
Experience with PQC algorithms, lattice‑based cryptography, or hybrid key exchange.
Hands‑on experience with OpenSSL, BoringSSL, Azure Key Vault, HSMs, or certificate authorities.
Proficiency in Go, Python, Rust, or C/C++ for cryptographic prototyping.
Familiarity with X.509, CSR formats, OCSP, CRLs, and certificate automation.
Understanding of NIST PQC standardization, IETF drafts, and CAB Forum requirements.
Preferred Qualifications
Experience implementing ML‑KEM, ML‑DSA, or hybrid certificate chains.
Contributions to cryptographic libraries or standards bodies.
Experience with enterprise PKI, IoT identity, or large‑scale certificate automation.
Knowledge of secure enclaves, HSM integration, or key‑management workflows.
What You’ll Work On
PQC‑ready certificate issuance pipelines
Hybrid negotiated dual‑layer (HNDL) signing
PQC‑enabled micro‑agents for distributed certificate discovery
Automated crypto‑agility policy engines
PQC migration playbooks for enterprise customers
Why Securetron
Work at the forefront of post‑quantum cryptography and PKI automation
Build infrastructure used by enterprises preparing for the 47‑day TLS era
Shape the future of trust automation across cloud, on‑prem, and hybrid environments
Competitive compensation, equity, and growth opportunities

Work arrangement
Yes