Role & Responsibilities

- Operate, configure, and maintain CloudHSMs for Certificate Authority (CA) and Key Management (KMS) systems on GCP.

- Implement high-availability and failover processes for crypto systems across regions.

- Manage the digital certificate lifecycle: issuance, renewal, and revocation.

- Develop, maintain, and troubleshoot applications using Google Tink cryptographic library (Node.js, Java, Go, C++).

- Detect and remediate security issues in cryptographic code and tools.

- Prepare systems for post-quantum cryptography (PQC) compliance.

- Automate deployment, monitoring, and management of crypto infrastructure using IaC, CI/CD pipelines, and containers.

- Deploy and manage encrypted workloads on Google Kubernetes Engine (GKE).

- Configure secure role-based access control and service account permissions for crypto resources.

- Collaborate with the cloud security team to ensure compliance with organizational security policies.

Preferred Candidate Profile

- Experience:



4+ years in encryption/cryptography roles.

- Technical Skills:

- Proficiency with GCP, CloudHSM, Cloud KMS.

- Strong experience managing HSMs and digital certificates across regions with high availability.

- Hands-on experience with Google Tink library in Node.js, Java, Go, C++ (additional Tink-supported languages are a plus).

- Knowledge of post-quantum cryptography (PQC) and modern encryption techniques.

- Experience with Google Trust Services (Public CA).

- DevOps skills: building secure pipelines, automating deployments, and working with containers.

- Familiarity with GCP IAM roles and policies, security configurations, and compliance automation.

- Certification: GCP Certification preferred.

- Other: Strong across 23 components: GCP Development, DevOps, Encryption. Adaptable with hybrid work model and shift timings.

📌 GCP cloud Long term contact hybrid-2days ( hyd,bng,chn,delhi) (Hyderabad)
🏢 Cloudxtreme
📍 Hyderabad