PKI & Cryptography Specialist

City and office address: EU / Remote (work within European time zone) Work format: 100% Remote (from EU countries) Employment: Full-time (1 FTE) Salary range: 4000-8.000$ Hiring specifics: Project-based employment: until the end of 2026 with a high probability of extension until June 2027. Languages: English or Polish (B2). Work in an international distributed team on a long-term security project. Job description: We are looking for an experienced PKI & Cryptography Specialist to participate in a long-term security project focused on cryptographic key and certificate management. If you know how to bring order to PKI infrastructure, control the lifecycle of secrets, and monitor crypto hygiene — this role is for you! You will be responsible for the full audit, accounting, and security of the company's cryptographic assets, as well as optimizing secret rotation and storage processes. Our stack: PKI / TLS / mTLS HSM (Hardware Security Module) KMS (HashiCorp Vault and others) Key & Certificate Lifecycle Management Responsibilities: Maintain and update a registry of all cryptographic keys, certificates, and secrets. Audit and control the lifecycle of keys/certificates (generation, rotation, renewal, revocation, archiving). Verify certificate expiration dates and key rotation schedules. Control access matrices for keys and secrets. Analyze storage conditions (HSM / KMS) and the cryptographic algorithms/key lengths used. Configure and maintain TLS / mTLS protocols. Candidate requirements: Deep understanding of practical cryptography and PKI standards. Experience with TLS / mTLS and certificate lifecycle management. Skills in working with HSM (Hardware Security Module) or KMS (Key Management Systems, HashiCorp Vault, etc.). Experience in auditing access to secrets and passwords. Located within a European (EU) time zone. Working level of English or Polish language.