Senior Software Engineer – Digital Identity, Applied Cryptography

🕒 July 27

🇩🇪 Germany – Remote

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 39%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SaltRock GmbH

WebsiteLinkedInAll Job Openings

2 - 10 employees

Founded 2024

🔒 Cybersecurity

🤖 Artificial Intelligence

🏛️ Government

Cybersecurity • Artificial Intelligence • Government

SaltRock GmbH is a Cologne-based technology company focused on building secure, sovereign digital products and services for public institutions, defence and industrial clients. They provide cloud computing, software engineering, cybersecurity and AI solutions, and offer European-focused products such as Evida (an evidence/evidence-cloud protection solution) and SecureID (a PKI wallet for digital identities). SaltRock emphasizes digital sovereignty, secure architectures, and long-term operational resilience for sensitive and regulated sectors (public sector, police & justice, industry, and defence).

📋 Description

• Technical responsibility for the continued development of the entire SecureID stack—from the mobile app and PKI backend to platform integrations • Expanding the exchange of cryptographic material and cryptographic operations with iOS and Android operating systems • Implementing CryptoTokenKit token extensions and Keychain integration on iOS • Implementing KeyChain Provider and Knox UCM/eSE integration on Android • Ensuring that third-party applications such as email, browsers, and VPN clients can use SecureID certificates without key material ever leaving secure hardware • Supporting the BSI approval process, including audit preparation, hardening, cryptographic compliance, threat modeling, and penetration-test coordination • Communicating with certification and testing bodies • Designing and implementing new features, such as credential lifecycle management, external IdP integration, and Smart Lock integrations • Further developing the Windows logon flow with Credential Provider and CNG Key Storage Provider bridge • Maintaining build, signing, and release processes • Expanding test coverage • Preparing technical documentation • Coordinating with partners and pilot customers

🎯 Requirements

• Several years of professional experience in mobile and/or systems-level software development, such as Swift/iOS, Kotlin/Android, C#/.NET, or C++ • Solid understanding of public-key cryptography and PKI, including X.509 certificates, ECDSA, certificate chains, and challenge-response protocols • Experience with Apple Keychain Services / Secure Enclave and Android Keystore or KeyChain • Ideally, experience with CryptoTokenKit extensions or Samsung Knox UCM • Practical experience with BSI approval or certification procedures, such as TR-03161, TR-02102, or Common Criteria; candidates must have actively supported at least one such process • Willingness to learn Flutter/Dart, Python, React, and Windows internals • Independent and structured approach to work • Experience with Git, CI/CD, and high-quality documentation • Fluency in written and spoken German and English • Nice to have: Secure Element development (eSE, PIV applets, Java Card, APDU protocols) • Nice to have: BLE (GATT, LE Secure Connections pairing) or NFC/HCE development • Nice to have: Windows internals (Credential Provider, LSA, CNG/KSP, Kerberos/PKINIT, MSI/WiX) • Nice to have: Zitadel or comparable OIDC IdPs, step-ca, Supabase, and Linux server administration (Hetzner) • Nice to have: Samba/Active Directory integration

🏖️ Benefits

• Latest MacBooks or Windows Surface devices • iPhone or Pixel, including an unlimited mobile plan, also for private use • ChatGPT, Claude, Personio, and HubSpot • Company credit card, including expense management software • Edenred City Card (€50 per month) • 30 days of annual leave • Trust-based working hours (“Come as you are”) • Remote work options • Modern offices in Münster, Cologne, and Leverkusen • Professional certifications • Leadership and soft-skills training • Access to LinkedIn Learning or Udemy