Security Software Engineer | Cryptography & Identity (Python)

{
  "content_hash": "0703bf78f9b0d3daae5dc565b6235da475eb3be0c47366e8ee9e9ed405e26958",
  "source_hash": "9bfd90e41053a7fbd25c0df283729ef3702bbc91f08a43d8b22cc1f0de6dd02c",
  "last_changed_at": "2026-05-30T05:46:16.594Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Cluj-Napoca, Cluj, 400593, Romania",
    "city": "Cluj-Napoca",
    "region": "Cluj",
    "country": null,
    "is_remote": true,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T20:30:17.694Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "Cluj-Napoca, Cluj, 400593, Romania",
      "city": "Cluj-Napoca",
      "region": "Cluj",
      "country": null,
      "is_remote": true,
      "confidence": 0.8
    },
    "countries": []
  },
  "remote_policy": "remote",
  "salary_period": null,
  "workplace_type": "remote",
  "salary_currency": null
}

{}

{
  "list_job": {
    "id": "282",
    "isRemote": null,
    "location": {
      "city": "Cluj-Napoca",
      "state": "Cluj"
    },
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "province": null
    },
    "departmentId": "18929",
    "locationType": "2",
    "jobOpeningName": "Security Software Engineer | Cryptography & Identity (Python)",
    "departmentLabel": "DIG",
    "employmentStatusLabel": "Contractor"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": "Cluj-Napoca",
      "state": "Cluj",
      "postalCode": "400593",
      "addressCountry": "Romania"
    },
    "datePosted": "2026-03-24",
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "countryId": null
    },
    "description": "<p><span style=\"font-weight: bold\">About the job</span><br><span style=\"font-weight: bold\">This is a determined period project; estimated project duration - 3-4 months.</span></p>\n<p><br></p>\n<p>We are looking for a security-focused Backend Developer to bridge the gap between high-level application logic and deep-level cryptographic hardware. You will be responsible for building a mission-critical internal Python application that serves as the secure gateway between Azure AD, HashiCorp Vault, and Hardware Security Modules (HSM).</p>\n<p>This is a role for a developer who understands that \"security\" isn’t just a checklist—it’s the core feature. You will work closely with the client’s lead technical expert to design and implement a modular architecture that handles everything from token exchange to master key derivation.</p>\n<p><br></p>\n<p><span style=\"font-weight: bold\">What you'll be doing:</span></p>\n<ul>\n<li>Architect &amp; Develop: Build a robust Python backend to manage the lifecycle of X.509 certificates, AES, and DES keys.</li>\n<li>Identity Orchestration: Implement complex authentication flows, including OAuth2/Entra ID integration and token exchange for HSM access.</li>\n<li>Secure Integration: Establish secure communication via TLS-secured TCP to HashiCorp Vault and HSM environments.</li>\n<li>Cryptographic Operations: Design and implement key wrapping, unwrapping, and derivation logic (master keys to product-specific keys).</li>\n<li>Deployment: Containerize services using Docker and manage secure networking via reverse proxies (Traefik).</li>\n</ul>\n<p><br><span style=\"font-weight: bold\">What you need to be successful:</span></p>\n<p><span style=\"font-weight: bold\">Must-Haves:</span></p>\n<ul>\n<li>Strong Python Development: Proven experience building production-grade backend applications and consuming/implementing REST APIs.</li>\n<li>Identity &amp; Access: Deep understanding of OAuth2, OpenID Connect, and integration with Azure AD / Entra ID.</li>\n<li>HSM Knowledge: Practical experience interfacing with Hardware Security Modules (e.g., Thales/Luna) via API/TLS protocols.</li>\n<li>Cryptography Fundamentals: Proficiency in AES-128/256, DES/TDES, and secure key lifecycle management.</li>\n<li>Infrastructure: Solid experience with Docker, Linux server operations, and TLS handshake mechanisms.</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Nice-to-Haves:</span></p>\n<ul>\n<li>HashiCorp Vault: Experience with Vault operations, policy design, and secrets engines.</li>\n<li>Security Design: Experience in threat modeling and data-at-rest/transit protection.</li>\n<li>Network Security: Experience configuring ingress controllers/reverse proxies like Traefik.</li>\n</ul>\n<p><br><span style=\"font-weight: bold\">On-site Work Expectations</span></p>\n<p>The consultant should work on-site in Norway initially (first month or until fully productive). After that, remote work is acceptable; they will must travel when certain secure operations/testing will be required.</p>",
    "compensation": null,
    "departmentId": "18929",
    "locationType": "2",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "Security Software Engineer | Cryptography & Identity (Python)",
    "departmentLabel": "DIG",
    "jobOpeningStatus": "Open",
    "minimumExperience": "Experienced",
    "jobOpeningShareUrl": "https://wirtek.bamboohr.com/careers/282",
    "employmentStatusLabel": "Contractor"
  }
}