Senior Software Engineer – Digital Identity, Applied Cryptography

🔥 8 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SaltRock GmbH

WebsiteLinkedInAll Job Openings

2 - 10 employees

Founded 2024

🔒 Cybersecurity

🤖 Artificial Intelligence

🏛️ Government

Cybersecurity • Artificial Intelligence • Government

SaltRock GmbH is a Cologne-based technology company focused on building secure, sovereign digital products and services for public institutions, defence and industrial clients. They provide cloud computing, software engineering, cybersecurity and AI solutions, and offer European-focused products such as Evida (an evidence/evidence-cloud protection solution) and SecureID (a PKI wallet for digital identities). SaltRock emphasizes digital sovereignty, secure architectures, and long-term operational resilience for sensitive and regulated sectors (public sector, police & justice, industry, and defence).

📋 Description

• Technical ownership for the ongoing development of the entire SecureID stack — from the mobile app through the PKI backend to platform integrations • Expand secure exchange of cryptographic material and operations with operating systems: CryptoTokenKit token extensions and Keychain integration on iOS; Android KeyChain provider and Samsung Knox UCM/eSE integration on Android — enabling third-party apps (mail, browsers, VPN) to use SecureID certificates without key material leaving secure hardware • Support the BSI approval process: audit preparation and hardening according to BSI TR-03161 and TR-02102-1, crypto compliance, threat modeling, support during penetration tests, and liaison with assessment bodies • Design and implement new features (e.g., credential lifecycle, external IdP integrations, smart-lock integrations) • Evolve the Windows logon path (Credential Provider, CNG Key Storage Provider bridge) as one of several platform features • Maintain build, signing, and release processes and expand test coverage; produce technical documentation and coordinate with partners and pilot customers

🎯 Requirements

• Several years of professional experience in mobile and/or system-level software development (e.g., Swift/iOS, Kotlin/Android, C#/.NET, C++) • Solid understanding of public-key cryptography and PKI: X.509 certificates, ECDSA, certificate chains, challenge–response schemes • Experience with platform-level crypto APIs and hardware key stores: Apple Keychain Services / Secure Enclave, Android Keystore/KeyChain — ideally with CryptoTokenKit extensions or Samsung Knox UCM • Practical experience with BSI approval or certification processes (e.g., TR-03161, TR-02102, or Common Criteria) — you have actively participated in such a process • Willingness to work across a broad stack: Flutter/Dart, Python, React, Windows internals — you don't need to know everything, but you should be eager to work with all parts • Independent, structured working style; experience with Git, CI/CD, and clear documentation • German and English, both spoken and written.

🏖️ Benefits

• Challenging work: Contribute to a technically sophisticated security product from the secure element to system integration — deep technical involvement rather than routine CRUD • Influence: You significantly shape architecture and technology decisions, with short communication paths in a small team • Top-notch equipment: Latest MacBooks or Windows Surfaces, iPhone or Pixel including an unlimited mobile plan — for private use as well • Modern software stack: ChatGPT, Claude, Personio, HubSpot • Additional benefits: corporate credit card including an expense tool, plus an Edenred City card (€50 per month) • Flexible working: 30 vacation days + trust-based working hours ("Come as you are") • Locations & remote: Option to work from home and modern offices in Münster, Cologne, and Leverkusen • Development: Professional certifications as well as leadership and soft-skill training, plus access to platforms like LinkedIn Learning and Udemy