Skip to content

Site search

Type to search Pages

All open roles

Cryptography

Applied Cryptographer, Credential Issuance

Own the issuance path for short-lived, scoped credentials — the moment an agent is trusted to act.

  • team: Cryptography
  • location: Remote (EMEA)
  • type: Full-time
  • level: Senior

The role

Every agent gets a distinct identity and credentials that live for minutes, not months. You own the cryptography that makes those credentials unforgeable, revocable, and cheap to issue at volume.

This is applied work: correctness, key handling, and performance under load, not papers.

What you will do

Design the issuance and rotation flow for scoped, short-lived credentials.

Choose and defend the primitives — signatures, attestations, and revocation — against a written threat model.

Drive the path from anomaly to full revocation down toward seconds.

Review the engineering team's use of the crypto surface you own.

What we look for

Hands-on experience shipping cryptographic systems in production — PKI, token issuance, HSMs, or credential frameworks.

You know where implementations leak and you test for it.

You can explain a trade-off between security and latency to the team making it.

Apply for this role

Your details go straight to the hiring team — every application gets a human read.