Senior Cryptographer

We are seeking a highly skilled and motivated to join our dynamic cybersecurity and network engineering team. In this pivotal role, you will be responsible for designing, implementing, and maintaining robust IT infrastructure and security systems that safeguard organizational assets. Your expertise will help ensure compliance with industry standards such as NIST, ISO 27000 series, and FedRAMP, while supporting the seamless operation of enterprise networks and cloud environments. This position offers an exciting opportunity to work on cutting-edge cybersecurity initiatives, network architecture, and system security plans that protect critical data and infrastructure., * Develop, deploy, and manage complex network infrastructure including LAN, WAN, routing protocols (OSPF, BGP), VPNs, and SD-WAN solutions to ensure high availability and optimal performance.

• Implement and maintain security measures aligned with NIST standards, ISO 27000 series, PCI DSS, and FIPS guidelines to protect against vulnerabilities and cyber threats.
• Configure and support security tools such as Cisco ISE for identity & access management, Cisco ASA firewalls, IDS/IPS systems, SIEM platforms like Splunk or SolarWinds for threat detection & response, and vulnerability assessment tools.
• Conduct vulnerability research, risk assessments, incident response activities, and incident recovery procedures to mitigate potential threats proactively.
• Manage encryption protocols including PKI implementations, IPsec VPNs, SSL/TLS configurations for secure communications across cloud infrastructure (AWS, Google Cloud Platform) and on-premises systems.
• Support system administration tasks across diverse operating systems including Windows, Linux (Debian, CentOS), macOS, openSUSE, Solaris, BSD variants; automate deployments using Ansible or Terraform.
• Lead system hardening initiatives following security frameworks like RMF or DIACAP; develop system security plans; perform threat intelligence analysis; support disaster recovery planning.

Do you have experience in openSUSE?, Do you have a Master’s degree?, * Extensive knowledge of computer networking concepts such as TCP/IP stack, DNS/DHCP services, load balancing (F5 or similar), network protocols (HTTP/SOAP), Ethernet switching/routing (EIGRP, OSPF), MPLS networks.

• Proficiency in configuring and managing firewalls (Cisco ASA), IDS/IPS systems, VPNs (OpenVPN/IPsec), SAN/NFS storage solutions; experience with VMware vSphere or other virtualization platforms.
• Strong understanding of cybersecurity principles including threat detection & response, vulnerability management & assessment, system hardening techniques; familiarity with attack frameworks.
• Hands-on experience with cloud computing platforms (AWS, Azure), cloud architecture design principles including PaaS/IaaS models; knowledge of cloud security best practices aligned with FISMA/FedRAMP standards.
• Ability to analyze logs using tools like Log analysis platforms or SolarWinds; perform incident management using ITIL practices; utilize scripting languages such as Python or Bash for automation tasks.
• Familiarity with identity & access management solutions like LDAP/Active Directory; implement SSO solutions; manage GPO policies across enterprise environments.
• Strong foundation in computer science concepts such as operating systems (Windows/Linux/macOS), scripting for automation purposes; understanding of open-source tools like Fiddler or PowerShell for troubleshooting. Join us to be part of a forward-thinking team dedicated to advancing cybersecurity resilience through innovative network engineering!, * Hardware Security Modules: 5 years (Required)
• Side Channel Resistance: 5 years (Preferred)
• PKI Infrastructure Design: 5 years (Required)
• Key Management Systems: 5 years (Required)