Job Description

Job Description
Looking for a professional to design, implement and test a KMS integration layer between Canton and Azure Key Vault/Managed HSM, allowing the secure use of cryptographic signatures and key management.
The position requires close collaboration with infrastructure teams to meet key escrow, signing and certificate validation requirements. It also involves developing well-tested, reusable libraries and integrating them with deployment pipelines and secure CI/CD flows.
Responsibilities:
Design, implement and test secure KMS integrations.
Collaborate with infrastructure teams to meet key escrow, signature, and certificate validation requirements.
Develop reusable libraries and ensure their integration with deployment pipelines and secure CI/CD flows.
Participate in code reviews, threat modeling, and security audits.
Provide clear technical documentation and collaborate with product, DevOps and architecture teams.
Requirements:
Experience in Scala and/or Java, with demonstrated ability to write clean, maintainable and secure code.
Understanding of cryptographic fundamentals, including key lifecycle, secure storage, and secure computing.
Knowledge of TLS and X.509 certificates.
Experience with digital signature algorithms and encryption/decryption streams (AES, RSA, etc.).
Experience building integrations, SDKs or plugins on distributed systems or blockchain platforms.
Familiarity with REST/JSON APIs and asynchronous systems.
Ability to work in Git-based environments with modern CI/CD tools.
High intermediate to fluent English (written and spoken) for effective technical communication.
Knowledge of blockchain or DLT platforms in enterprise use cases is valued.
Knowledge of Canton, Daml or similar smart contract languages ​​is valued.
Experience with Azure SDKs, especially Key Vault and Managed HSM, as well as other KMS or HSM providers.
Familiarity with secure software development practices, including threat modeling.
Understanding of DevSecOps, including secrets management and security automation.
Experience working with Kubernetes, Helm and infrastructure automation (Terraform, Pulumi).

Salary to receive
To agree