Principal Security Engineer (Cryptography & PKI)

📋 Description

• Provide input on technical security requirements for new infrastructure and engineering initiatives.
• Assist with documentation and maintenance of the corporate security architecture blueprints.
• Design robust PKI hierarchies (Root CAs, Intermediate CAs, Issuing CAs) and select appropriate hardware security modules (HSMs) for scalable deployments.
• Provide security guidance and review of the deployment of encryption solutions across systems, applications, and networks.
• Provide security guidance and review of the end-to-end lifecycle of cryptographic keys and digital certificates, including generation, secure storage, rotation, usage, backup, revocation and destruction.
• Analyze existing encryption and management solutions to find weaknesses and identify gaps.

🎯 Requirements

• Either advanced studies in Cybersecurity, Computer Science, Information Systems, or similar
• Excellent written and verbal communication skills, including the ability to effectively collaborate with technical and senior business staff and management.
• 12+ years of experience in information security, with 7+ years focused on applied cryptography and Public Key Infrastructure (PKI).
• Expert-level knowledge of cryptographic primitives, algorithms (AES, RSA, ECC), hashing functions, and digital signature standards.
• Proven experience designing and deploying Hardware Security Modules (HSMs) and enterprise Key Management Systems (KMS).
• Strong understanding of regulatory and compliance frameworks related to data protection and packaging (GDPR, HIPAA).

🎁 Benefits

• Equal opportunity employer, AA/Veterans/Disabled.
• Cloudflare values diversity and inclusion.
• Reasonable accommodations available for applicants with disabilities.