Junior & Senior Software Developer

Cryptographic Engineering & Implementation

• Design and implement cryptographic modules and services (PKI, digital signature, encryption, hashing).

• Develop applications and APIs integrating cryptographic functions following PKCS#1, #7, #10, #11, #12, #15 standards.

• Contribute to research and prototyping of Post-Quantum Cryptography(PQC) algorithms based on NIST-approved standards (e.g., CRYSTALS-Kyber, Dilithium, Falcon).

• Evaluate and implement hybrid cryptography for quantum-safe migration.

• Enhance and upgrade internal CA system to PQC readiness.

Software Development & Architecture

• Develop secure back-end systems using Java. Knowledge of additional programming languages, such as C/C++, Python, Go or Rust, is an added advantage.

• Architect applications using microservices, event-driven and serverless approaches, leveraging platforms such as Kubernetes for container orchestration.

• Build and maintain scalable applications using Spring Boot, Flask, Django, or Micronaut frameworks.

• Ensure applications are cloud-native and optimised for deployment in AWS, Azure or Google Cloud Platform (GCP) environments.

Data and Integration

• Design and manage relational and NoSQL databases (e.g., PostgreSQL, MongoDB, DynamoDB).

• Develop secure RESTful and GraphQL APIs for internal and external integration.

• Apply best practices in data encryption, tokenization, and secure key storage.

AI and Automation

• Leverage AI tools and frameworks to enhance cryptographic analysis, anomaly detection, and code optimization.

• Automate code quality checks, compliance reporting, and risk analysis.

Governance, Risk & Compliance

• Familiarity with cryptographic implementations aligned with applicable BNM RMiT and PDPA requirements, ISO 27001 controls and NIST guidelines.

Qualifications & Experience

• Bachelor’s degree in Computer Science, Cybersecurity, or related fields.

• Minimum 3–5 years experience in secure software or cryptographic development.

• Experience with HSMs, key lifecycle management, and PKI infrastructures is a strong advantage.

• Exposure to AI-assisted development, DevSecOps pipelines, and automated testing frameworks.