Senior Security Engineer Cryptographic Strategy & Post-Quantum Readiness (PQR)

Senior Security Engineer – Cryptographic Strategy & Post-Quantum Readiness (PQR)

Company: BLS360

Location: Remote – India

Experience: 10+ Years

Employment Type: Full-Time

About BLS360

BLS360 is a cybersecurity and digital transformation company focused on Identity & Access Management (IAM), Identity Governance & Administration (IGA), privileged access, cloud security, and enterprise security transformation.

We are looking for a Senior Security Engineer – Cryptographic Strategy & Post-Quantum Readiness (PQR) to join our team and help transform enterprise cryptographic strategy into scalable, automated, and operational security services.

About the Role

This is a hands-on engineering role focused on enterprise cryptographic services, certificate lifecycle automation, cryptographic visibility, and Post-Quantum Readiness (PQR).

The engineer will work closely with platform, application, infrastructure, cloud, DevSecOps, and security teams to enable self-service certificate management through DigiCert, automate certificate lifecycle processes, establish a Cryptographic Bill of Materials (CBOM), and build the foundations required for future Post-Quantum Cryptography (PQC) migration.

The ideal candidate combines strong security engineering fundamentals with practical experience in PKI, certificates, TLS/SSL, automation, cloud, APIs, CI/CD, and cryptographic technologies.

Key Responsibilities

• Implement enterprise cryptographic strategy through practical security platforms, services, automation, engineering standards, and operational controls.
• Design, implement, and expand DigiCert self-service capabilities for application and infrastructure teams.
• Build secure workflows for certificate request, approval, issuance, renewal, revocation, and reporting.
• Automate enterprise certificate lifecycle management across applications, infrastructure, cloud, and other technology platforms.
• Integrate certificate automation with CI/CD pipelines, cloud platforms, Infrastructure-as-Code, secrets management, load balancers, APIs, and application platforms.
• Establish and maintain a Cryptographic Bill of Materials (CBOM) covering cryptographic assets, certificates, algorithms, keys, protocols, libraries, dependencies, ownership, business criticality, and lifecycle status.
• Support cryptographic discovery and inventory across applications, endpoints, networks, cloud services, PKI environments, and third-party technologies.
• Identify and remediate certificate expiration risks, weak or legacy cryptographic configurations, hard-coded cryptographic dependencies, and crypto-agility gaps.
• Develop reusable implementation patterns, automation scripts, runbooks, dashboards, technical documentation, and operational controls.
• Support Post-Quantum Readiness (PQR) and Post-Quantum Cryptography (PQC) initiatives, including readiness assessments, migration planning, hybrid cryptography pilots, and technology evaluations.
• Track implementation progress, technical dependencies, risks, and remediation activities and escalate blockers when necessary.
• Provide hands-on technical guidance to application, infrastructure, cloud, and security teams adopting enterprise cryptographic services.
• Collaborate with senior engineers and architects to evaluate emerging cryptographic technologies, standards, and implementation approaches.

Required Qualifications

• 10+ years of hands-on experience in security engineering, platform engineering, DevSecOps, cloud engineering, infrastructure engineering, or application engineering.
• Strong practical experience with PKI, X.509 certificates, TLS/SSL, Certificate Authorities (CA), certificate lifecycle management, and key management.
• Experience administering, integrating, or automating enterprise certificate-management platforms.
• DigiCert experience strongly preferred.
• Strong automation and scripting experience using Python, PowerShell, Bash, Java, Go, or similar languages.
• Experience with REST APIs, CI/CD pipelines, Git, Terraform, Ansible, containers, and/or Kubernetes.
• Hands-on experience with AWS, Azure, and/or Google Cloud, including cloud certificate, key-management, secrets-management, identity, and network-security services.
• Solid understanding of applied cryptography, including:
• Encryption
• Hashing
• Digital signatures
• Key exchange
• PKI
• Cryptographic protocols
• Cryptographic libraries
• Ability to troubleshoot complex certificate, TLS, trust-store, key, and cryptographic configuration issues in production environments.
• Strong communication, documentation, troubleshooting, and collaboration skills.
• Ability to work effectively with distributed global teams in a remote environment.

Preferred Qualifications

• Experience implementing certificate self-service portals.
• Experience with certificate automation and ACME, SCEP, or EST workflows.
• Experience building certificate lifecycle integrations and enterprise PKI services.
• Experience creating or maintaining a CBOM, cryptographic inventory, SBOM, CMDB, or asset-discovery program.
• Familiarity with Post-Quantum Cryptography (PQC), Post-Quantum Readiness (PQR), crypto-agility, and emerging standards such as ML-KEM and ML-DSA.
• Experience with HSMs, cloud KMS, secrets-management platforms, code signing, mTLS, API security, or enterprise PKI modernization.
• Experience working in a large, regulated, or highly distributed enterprise environment.

If you are a hands-on security engineer who enjoys solving complex security challenges, building automation, and working across cloud, infrastructure, application, and security teams, we would like to hear from you.

How to Apply

Interested candidates can apply through LinkedIn or share their updated resume with BLS360 Career page.