At CryptoNext Security, we are pioneering post-quantum cryptography to ensure tomorrow’s cybersecurity today. As quantum computing threatens current encryption standards, we deliver robust, high-performance cryptographic libraries and industrial solutions that meet the highest security requirements. We work with top-tier institutions and mission-critical partners across Europe and beyond.
We are looking for a DevSecOps Engineer who will industrialize and secure our software stack, automate deployment pipelines, and ensure the integrity of our cryptographic systems from source to delivery.
What you’ll do- Design, implement and monitor secure, automated CI/CD pipelines (GitLab CI, GitOps workflows) with cryptographic integrity checks.
- Define and operate software update and delivery infrastructure, including attestation and rollback mechanisms, in certified environment.
- Ensure end-to-end software supply chain security (SAST/DAST, signing, verification, SBOM) with the QA team
- Build and maintain reproducible system images for our appliances (ISO, PXE boot, firmware, cloud-init).
- Manage and harden our cloud and on-premise infrastructures (AWS, Azure, OpenStack).
- Implement and evolve Infrastructure-as-Code (Terraform, Ansible) for bare metal and cloud deployments.
- Harden and operate secure infrastructure: IAM, VPNs, firewalls, secrets management, container orchestration (Docker/Kubernetes).
- Contribute to FinOps strategies: monitoring usage, cost-efficiency, and resource provisioning.
RequirementsWhat you bring
- Solid background in Linux systems administration and scripting (Shell, Python, etc.).
- Solid experience with Linux internals, kernel parameters, and system image generation.
- Proficiency in at least one programming language (Python, Go, Rust, etc.).
- Mastery of UEFI, Secure Boot, and tooling like sbverify, sbsign, mokutil, efibootmgr.
- Experience building and managing UKIs (e.g., via ukify, systemd-stub, dracut, initrd).
- Experience in creating and managing custom OS images, bootloaders, secure boot chains.
- Knowledge of security standards and secure software lifecycle.
- Experience with CI/CD tools (GitLab CI, Jenkins, ArgoCD, etc.).
- Familiarity with compliance-driven environments (ANSSI, NIST, ISO).
- Cloud proficiency (AWS / Azure / OpenStack) and hands-on with containerization (Docker, ideally Kubernetes).
- Bonus: knowledge of cryptographic tools and secure key management.
You’ll collaborate with cryptographers, low-level C/C++ developers, and security engineers working on certifiable infrastructure. You report directly to the head of engineering and act as the technical reference for secure system delivery and boot integrity, ensuring what we ship can be trusted from power-on to production.
BenefitsWhat’s in it for you at CryptoNext
- The opportunity to apply your engineering expertise in a cutting-edge cybersecurity environment.
- Work on strategic, innovative projects with tangible impact.
- Join a passionate, high-level team at the forefront of post-quantum cybersecurity.
- Office located in central Paris.
- A supportive and intellectually stimulating environment that encourages curiosity and technical excellence
Similar Jobs
.jpg)
What We Do
CryptoNext Security is a European software vendor based in Paris, an industry leader in quantum-proof cryptography (PQC) solutions. Our vision and the solutions we are developing are designed to manage the complete lifecycle of post-quantum migration, including the phases of discovery, remediation, and management. Founded in 2019 after 20+ years of academic research within the prestigious INRIA, CNRS and Sorbonne University, CryptoNext Security is identified by Gartner as part of its Top 5 in PQC and is, to date, the first European company selected by NIST's NCCoE group dedicated to the best PQC migration practices. We are developing an integrated, quantum-safe remediation suite allowing for the automation of PQC migration for IT/OT systems, infrastructures and applications. Our objective is to help businesses and HW/SW vendors face the quantum threat in an efficient, agile and sustainable way.
