Principal Security Engineer (Cryptography & PKI)

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Location(s) Available: Bengaluru About The Team Join Cloudflare’s Security Architecture Team with the following with the foll focus areas : Strategic Alignment: Translates the Organisations Cyber risk tolerance into specific technical blueprints and implements controls/prescriptive policies in mitigation/managing or remediating these risks Preventative Focus: Focuses on "shifting left" to fix architectural flaws before they become bigger risks or cost Technical Consulting: Acts as internal subject matter experts for Procurement (TPRM) and Engineering teams. About the role/ What You’ll Do Provide input on technical security requirements for new infrastructure and engineering initiatives. Assist with documentation and maintenance of the corporate security architecture blueprints. Participate in the design of robust PKI hierarchies (Root CAs, Intermediate CAs, Issuing CAs) and certificate policies, selecting appropriate hardware (HSMs) and software for scalable, secure deployments. Provide security guidance and review of the deployment of encryption solutions across systems, applications, and networks. Provide security guidance and review of the end-to-end lifecycle of cryptographic keys and digital certificates, including generation, secure storage, rotation, usage, backup, revocation and destruction. Conduct analysis of existing encryption and management solutions to find weaknesses and identify gaps. Ensure encryption implementations meet industry standards (e.g., NIST, FIPS) and compliance mandates (e.g., GDPR, HIPAA). Document security requirements and architectural decisions. Assist with defining security policies and standards, enforcing best practices, conducting risk assessments, and ensuring compliance with regulations. Work with CISO, IT teams, developers, and engineers to implement secure designs. Requirements Either advanced studies in Cybersecurity, Computer Science, Information Systems, or similar Excellent written and verbal communication skills, including the ability to effectively collaborate with technical and senior business staff and management. 12+ years of experience in information security, with 7+ years focused on applied cryptography and Public Key Infrastructure (PKI). Expert-level knowledge of cryptographic primitives, algorithms (AES, RSA, ECC), hashing functions, and digital signature standards. Proven experience designing and deploying Hardware Security Modu ... (truncated, view full listing at source)