Who we are
At CryptoNext Security, we are pioneering post-quantum cryptography to ensure tomorrow’s cybersecurity today. As quantum computing threatens current encryption standards, we deliver robust, high-performance cryptographic libraries and industrial solutions that meet the highest security requirements. We work with top-tier institutions and mission-critical partners across Europe and beyond.
We are looking for a DevSecOps Engineer who will industrialize and secure our software stack, automate deployment pipelines, and ensure the integrity of our cryptographic systems from source to delivery.
What you’ll do
- Design, implement and monitor secure, automated CI/CD pipelines (GitLab CI, GitOps workflows) with cryptographic integrity checks.
- Define and operate software update and delivery infrastructure, including attestation and rollback mechanisms, in certified environment.
- Ensure end-to-end software supply chain security (SAST/DAST, signing, verification, SBOM) with the QA team
- Build and maintain reproducible system images for our appliances (ISO, PXE boot, firmware, cloud-init).
- Manage and harden our cloud and on-premise infrastructures (AWS, Azure, OpenStack).
- Implement and evolve Infrastructure-as-Code (Terraform, Ansible) for bare metal and cloud deployments.
- Harden and operate secure infrastructure: IAM, VPNs, firewalls, secrets management, container orchestration (Docker/Kubernetes).
- Contribute to FinOps strategies: monitoring usage, cost-efficiency, and resource provisioning.
Requirements
What you bring
- Solid background in Linux systems administration and scripting (Shell, Python, etc.).
- Solid experience with Linux internals, kernel parameters, and system image generation.
- Proficiency in at least one programming language (Python, Go, Rust, etc.).
- Mastery of UEFI, Secure Boot, and tooling like sbverify, sbsign, mokutil, efibootmgr.
- Experience building and managing UKIs (e.g., via ukify, systemd-stub, dracut, initrd).
- Experience in creating and managing custom OS images, bootloaders, secure boot chains.
- Knowledge of security standards and secure software lifecycle.
- Experience with CI/CD tools (GitLab CI, Jenkins, ArgoCD, etc.).
- Familiarity with compliance-driven environments (ANSSI, NIST, ISO).
- Cloud proficiency (AWS / Azure / OpenStack) and hands-on with containerization (Docker, ideally Kubernetes).
- Bonus: knowledge of cryptographic tools and secure key management.
The team you’ll join
You’ll collaborate with cryptographers, low-level C/C++ developers, and security engineers working on certifiable infrastructure. You report directly to the head of engineering and act as the technical reference for secure system delivery and boot integrity, ensuring what we ship can be trusted from power-on to production.
Benefits
What’s in it for you at CryptoNext
- The opportunity to apply your engineering expertise in a cutting-edge cybersecurity environment.
- Work on strategic, innovative projects with tangible impact.
- Join a passionate, high-level team at the forefront of post-quantum cybersecurity.
- Office located in central Paris.
- A supportive and intellectually stimulating environment that encourages curiosity and technical excellence
