← Data Protection & Critical Systems
Data Protection & Critical Systems
Key Management Engineer
Not accepting applications
Remote
Remote-friendly
Tiempo completo
Access tier: T4
Background screening required
Professional credentials required
Bonding or insurance required
About Sequester
Sequester is a privacy-first encrypted vault for personal photos and videos. We build software where security, reliability, and user trust are product features???not afterthoughts.
About this role
You will own Sequester's key management infrastructure???generation, storage, rotation, and access policies???for the keys that protect user vaults at rest and in transit.
What you will do
- Design and operate KMS/HSM integrations for application and backup encryption keys
- Implement key rotation, envelope encryption, and break-glass procedures with audit trails
- Review all services that touch key material for least-privilege and separation of duties
- Lead drills for key compromise scenarios and document recovery steps
- Coordinate with Cryptography on algorithm lifecycle and migration plans
What we are looking for
- KMIP/HSM/KMS experience in production environments
- Deep understanding of key ceremonies, dual control, and quorum policies
- Background screening, credentials, and bonding per tier-4 requirements
- Zero tolerance for key material in logs, tickets, or chat
Location
Remote-friendly. We hire globally and collaborate async-first across time zones.
Not currently accepting applications
This role page remains available for reference, but we are not accepting new applications right now. Check back later or browse other openings. Ver vacantes