Cryptography Engineer

As a Contract Crypto Engineer at Capco, you’ll design, develop, and support cryptographic solutions that protect data at rest and in transit across complex enterprise environments. You’ll bring together expertise in encryption technologies, mainframe systems, application development, and secure engineering practices, with a particular focus on Crypto as a Service (CaaS) capabilities. Working alongside enterprise technology teams, you’ll help deliver secure, resilient solutions that meet security, compliance, and operational requirements within financial services. What You’ll Do Design and develop secure solutions for data-at-rest and data-in-transit encryption, applying established cryptographic practices. Contribute to system design, architecture, application development, deployment, and ongoing platform support. Develop and support Crypto as a Service (CaaS) capabilities and enterprise-grade security solutions. Collaborate with enterprise technology teams to ensure cryptographic solutions meet security, compliance, and operational requirements. Support development practices, deployment pipelines, and release processes using enterprise tools and standards. What We’re Looking For Strong knowledge of encryption technologies, including symmetric and asymmetric cryptography, public key cryptography, and digital signing services. Experience designing and developing secure systems, applications, and enterprise technology solutions. Knowledge of IBM z/OS and related development tools, alongside mainframe technologies including COBOL, JCL, IMS, DB2, and Endeavor. Working knowledge of Java and Spring, with experience using application servers such as JBoss and WebSphere. Broad understanding of the technical environments, software, hardware, programming languages, tools, and operating systems used within large enterprise environments. Bonus Points For Knowledge of the IBM ICSF Crypto engine. Experience with IBM Liberty. Experience with enterprise tools such as Jenkins, Servi

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the Role & Team The Cryptographic Services & Infrastructure team secures and manages cryptographic keys and enables Robinhood engineering teams to safely leverage core capabilities like encryption and decryption. Join a high-impact team responsible for protecting some of Robinhood's most sensitive financial and customer data! In this role, you will help build and operationalize Robinhood's new in-house card-processing service—a critical initiative that brings core capabilities in-house and offers meaningful ownership across software, infrastructure, security, and operations. While prior cryptography or security experience is highly preferred, we are excited to empower strong engineers with a passion for security to learn and grow their skills on the job. This role is based in our Bellevue, WA and Menlo Park, CA offices, with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What you'll do day-to-day Design, build, and maintain production services and infrastructure supporting key management, encryption, and decryption functions. Help architect, launch, and scale Robinhood’s new in-house card-processing environment to protect sensitive card, financial, and tax-related data. Write clean, maintainable production code and build operational tooling across software, infrastructure, and security controls. Collaborate with internal engineering teams to support migrations, drive adoption of

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the Role + Team The Security Engineering team builds the identity and access control plane governing how employees, services, and agentic workloads access Robinhood’s critical infrastructure. We are a platform-building engineering team focused on creating secure, frictionless, and automated self-service access systems at scale. As a Staff Software Engineer on this team, you will shape Robinhood’s foundational identity architecture, define technical strategy, and build Tier-0 access infrastructure used across the entire company! From solving complex authentication and authorization challenges to setting secure guardrails for emerging AI and agentic workflows, your technical leadership will directly impact every product team at Robinhood! What You'll Do Access Control Plane Architecture: Define and build the core technical architecture for managing employee, service, non-human, and agentic access across company-wide resources Tier-0 Platform Engineering: Design, build, and operate highly available, resilient, and observable backend identity infrastructure using Go, Python, Rust, or comparable systems languages. AuthN & AuthZ Solutions: Implement modern identity protocols and access frameworks (OAuth 2.0, OpenID Connect, RBAC, ABAC, and policy-based access controls). AI & Agentic Access Governance: Develop secure access patterns, identity frameworks, governance, and observability guardrails for AI agents, LLM applications, and Model Context Protocol (MCP) systems. Self-Service Developer Experience: Create automated, developer-friendly platforms that allow teams to request, approve, provision, and audit access without ma