Security Architect, Encryption

About This Role

Join Cloudflare's Security Architecture Team as a Security Architect, Encryption to provide input on technical security requirements, assist with corporate security architecture blueprints, and design robust PKI hierarchies for scalable and secure deployments.

Responsibilities

• Provide input on technical security requirements for new infrastructure and engineering initiatives
• Assist with documentation and maintenance of the corporate security architecture blueprints
• Participate in the design of robust PKI hierarchies (Root CAs, Intermediate CAs, Issuing CAs) and certificate policies
• Select appropriate hardware (HSMs) and software for scalable, secure deployments
• Provide security guidance and review of the deployment of encryption solutions across systems, applications, and networks
• Provide security guidance and review of the end-to-end lifecycle of cryptographic keys and digital certificates
• Conduct analysis of existing encryption and management solutions to find weaknesses and identify gaps
• Ensure encryption implementations meet industry standards (e.g., NIST, FIPS) and compliance mandates (e.g., GDPR, HIPAA)
• Document security requirements and architectural decisions
• Assist with defining security policies and standards, enforcing best practices, conducting risk assessments, and ensuring compliance with regulations
• Work with CISO, IT teams, developers, and engineers to implement secure designs

Requirements

• Advanced studies in Cybersecurity, Computer Science, Information Systems, or similar
• Excellent written and verbal communication skills
• 12+ years of experience in information security
• 7+ years focused on applied cryptography and Public Key Infrastructure (PKI)
• Expert-level knowledge of cryptographic primitives, algorithms (AES, RSA, ECC), hashing functions, and digital signature standards
• Proven experience designing and deploying Hardware Security Modules (HSMs) and enterprise Key Management Systems (KMS)
• Strong understanding of regulatory and compliance frameworks related to data protection and packaging

Qualifications

• Advanced studies in Cybersecurity, Computer Science, Information Systems, or similar
• 12+ years of experience in information security, with 7+ years focused on applied cryptography and Public Key Infrastructure (PKI)

Nice to Have

• Experience with cloud-native KMS solutions (e.g., AWS KMS, Azure Key Vault, GCP Cloud KMS)
• Worked on similar organizations in the past as Cloudflare

Skills

* Required skills