2 months ago
Bengaluru, IndiaStaff+
Responsibilities
- Analyze application and platform use of cryptographic libraries, TLS stacks, signing workflows, encryption modules, key stores, HSM/KMS interfaces, and hardcoded cryptographic dependencies.
- Create reference implementations for hybrid key exchange, signature migration, crypto abstraction, certificate upgrades, and library replacement patterns.
- Build reusable engineering playbooks for Java, .NET, Python, Go, C/C++, APIs, middleware, and cloud-native services.
- Support PQC pilots using approved libraries, testbeds, and partner or open-source tooling.
- Define validation approaches for interoperability, regression, performance, latency, compatibility, and operational impact.
- Guide application delivery teams and support AI-assisted code analysis and remediation workflows.
- Perform root-cause analysis, troubleshoot recurring issues, modify software code, adapt to new hardware and software, enhance performance, and upgrade interfaces.
- Collaborate with technical teams on configuration validation, application integration, deployment dependencies, and user training materials.
Requirements
- 6-10 years of overall experience, including at least 3-5 years in secure engineering, cryptographic implementation, application security engineering, platform security, DevSecOps, or security-focused software engineering.
- Strong programming and engineering background in at least two of Java, .NET/C#, Python, Go, C/C++, Rust, or JavaScript/TypeScript.
- Working knowledge of OpenSSL, Bouncy Castle, crypto APIs, TLS stacks, PKCS#11, key stores, secret management, cloud KMS/HSM, and certificate usage patterns.
- Knowledge of secure SDLC, DevSecOps pipelines, automated testing, dependency management, and application security controls.
- Ability to create reference code, integration guides, technical design notes, and reusable implementation patterns.
- Practical understanding of PQC libraries and hybrid migration concepts.
- Preferred experience includes liboqs, OQS-OpenSSL, PQClean, service mesh, API gateways, code-signing pipelines, performance testing, protocol testing, fuzzing, regression automation, secure code review, and BFS/payment/core banking environments.
Benefits
- Applications from people with disabilities are explicitly welcome.
Tech Stack
Categories
About Wipro
Wipro is a global IT services and consulting firm that provides application development, cloud migration, infrastructure management, data/AI, and business process outsourcing for enterprises. It earns revenue through long-term outsourcing, managed services, and project-based consulting across multiple industries. Founded in 1945 and headquartered in Bangalore, India, Wipro is publicly traded (NYSE: WIT; NSE/BSE: WIPRO).