Role & Responsibilities
Operate, configure, and maintain CloudHSMs for Certificate Authority (CA) and Key Management (KMS) systems on GCP.
Implement high-availability and failover processes for crypto systems across regions.
Manage the digital certificate lifecycle: issuance, renewal, and revocation.
Develop, maintain, and troubleshoot applications using Google Tink cryptographic library (Node.js, Java, Go, C++).
Detect and remediate security issues in cryptographic code and tools.
Prepare systems for post-quantum cryptography (PQC) compliance.
Automate deployment, monitoring, and management of crypto infrastructure using IaC, CI/CD pipelines, and containers.
Deploy and manage encrypted workloads on Google Kubernetes Engine (GKE).
Configure secure role-based access control and service account permissions for crypto resources.
Collaborate with the cloud security team to ensure compliance with organizational security policies.

Preferred Candidate Profile
Experience:



4+ years in encryption/cryptography roles.
Technical Skills:
Proficiency with GCP, CloudHSM, Cloud KMS.
Solid experience managing HSMs and digital certificates across regions with high availability.
Hands-on experience with Google Tink library in Node.js, Java, Go, C++ (additional Tink-supported languages are a plus).
Knowledge of post-quantum cryptography (PQC) and contemporary encryption techniques.
Experience with Google Trust Services (Public CA).
DevOps skills: building secure pipelines, automating deployments, and working with containers.
Familiarity with GCP IAM roles and policies, security configurations, and compliance automation.
Certification: GCP Certification preferred.
Other: Strong across 23 components: GCP Development, DevOps, Encryption. Adaptable with hybrid work model and shift timings.

📌 Gcp Cloud Long Term Contact Hyb Days Hyd,bng,chn,delhi Hyderabad
🏢 Cloudxtreme
📍 Hyderabad