Encryption Engineer

About the role

Mindwhiz is seeking an experienced Encryption Engineer to strengthen its cybersecurity and data protection initiatives. You will design, implement, and manage encryption solutions that safeguard sensitive business and client data across enterprise systems, applications, databases, and cloud environments.

Key responsibilities

• Design, deploy, and maintain encryption solutions for enterprise applications and infrastructure.
• Implement encryption controls for data at rest, in transit, and in use.
• Manage cryptographic keys, certificates, and Key Management Systems (KMS).
• Support Public Key Infrastructure (PKI) implementation and certificate lifecycle management.
• Configure and maintain Hardware Security Modules (HSMs) where applicable.
• Integrate encryption technologies into cloud platforms, databases, storage systems, and applications.
• Conduct encryption assessments and remediate identified security gaps.
• Troubleshoot encryption‑related incidents and provide technical support.
• Collaborate with engineering and DevOps teams to implement secure‑by‑design solutions.
• Ensure compliance with organizational security policies and industry regulations.
• Develop and maintain technical documentation, standards, and procedures.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Security or a related field.
• 3–5 years of experience in encryption engineering, cybersecurity, or information security.
• Strong understanding of cryptographic algorithms, encryption protocols, and security architecture.
• Hands‑on experience with AES, RSA, ECC, TLS/SSL, PKI and hashing technologies.
• Experience with KMS, HSMs, certificate authorities and key lifecycle management.
• Familiarity with AWS KMS, Azure Key Vault, Google Cloud KMS or similar.
• Working knowledge of Linux and Windows server environments.
• Knowledge of security frameworks such as NIST, ISO 27001, PCI‑DSS and GDPR.

Required skills

• AES, RSA, ECC, TLS/SSL, PKI, hashing
• Key Management Systems (AWS KMS, Azure Key Vault, Google Cloud KMS)
• Hardware Security Modules (HSM)
• Certificate authorities and lifecycle management
• Linux and Windows server administration
• Security frameworks: NIST, ISO 27001, PCI‑DSS, GDPR
• Python, Bash, PowerShell scripting
• HashiCorp Vault, CyberArk (secrets management)

What we offer

• Competitive salary up to PKR 180,000 per month