Principal Engineer - Classical Cryptography & Architecture

We are looking for a Principal Engineer to own the classical cryptography architecture of our post-quantum cryptography (PQC) hardware acceleration products, targeting hardware security module (HSM) and network-appliance applications. Real-world quantum-safe systems are hybrid systems: classical and post-quantum algorithms operating side by side, with careful key management, crypto agility and migration paths. You will be the senior authority for this classical and hybrid layer, working alongside our PQC architecture leadership.

The role demands fluency on both sides of the transition: deep classical mastery combined with a solid working command of the post-quantum algorithms and standards the products are built around.

You will own the architecture and implementation strategy of the classical cryptographic functions of the product line: symmetric ciphers and modes (AES/GCM and beyond), hash functions (SHA-2/SHA-3, HMAC/KDF constructions), RSA/ECC offload, and true random number generation and entropy architecture (SP 800-90A/B/C). You will define the hybrid classical/post-quantum schemes (key establishment, dual signatures, composite certificates) and the crypto-agility mechanisms that allow customers to migrate safely, track the standardisation of hybrid and composite approaches (NIST guidance, IETF work on hybrid key establishment in TLS 1.3 and IKEv2, composite certificates) together with our PQC architects, guide RTL and software engineers implementing classical cores, technically evaluate third-party IP, and support FIPS 140-3 and CAVP certification of the classical algorithm suite.