Post-Quantum Cryptography Implementation Architect

A financial institution is undertaking a critical Post-Quantum Cryptography (PQC) Readiness Project to secure its internet-facing applications against quantum computing threats. You will be tasked with designing and documenting a comprehensive, end-to-end approach to migrate an existing internet-facing application to a quantum-safe cryptographic environment. This opportunity requires deep expertise in cryptographic architecture, TLS implementation, and secure system migration planning.

Responsibilities

• Design a complete technical approach for PQC algorithm selection and cipher suite implementation suitable for the application's security requirements
• Document the required changes to network components, infrastructure, and TLS 1.3 configuration to support hybrid PQC implementations
• Architect application-level cryptographic changes, including data encryption, digital certificate integration, and signature validation mechanisms
• Specify all digital certificate and PKI modifications necessary to support quantum-safe cryptographic standards in the application's environment
• Define the end-to-end validation and compliance testing strategy to ensure the PQC implementation meets regulatory and security standards
• Identify all teams and stakeholders required to execute the migration, including their specific responsibilities and dependencies
• Document the target architecture and final state of the PQC-compliant internet-facing application with detailed implementation steps
• Provide clear mapping of technical dependencies, required tools, libraries, and version requirements for the quantum-safe environment

Duration

The duration of this job is 12 weeks.

Requirements

• 8+ years of experience in cryptographic architecture, security engineering, or related fields
• Expert-level knowledge of post-quantum cryptography (PQC) algorithms, standardization efforts (NIST, IETF), and emerging quantum-safe cipher suites
• Proven experience designing and implementing TLS 1.3 and hybrid cryptographic solutions in production environments
• Deep understanding of digital certificate management, PKI infrastructure, and certificate lifecycle in quantum-safe contexts
• Demonstrated ability to design large-scale secure system migrations with clear technical documentation and implementation roadmaps
• Strong knowledge of internet-facing application security, authentication protocols, and cryptographic best practices
• Experience working with financial institutions or other highly regulated industries requiring quantum-safe compliance

Nice to Have

• Familiarity with specific PQC libraries and toolkits (e.g., liboqs, post-quantum implementations in OpenSSL)
• Experience with cryptographic compliance frameworks and industry standards (e.g., FIPS, Common Criteria)
• Prior involvement in NIST post-quantum cryptography standardization initiatives or similar industry working groups
• Background in enterprise security architecture or infrastructure modernization projects
• Knowledge of quantum computing fundamentals and threat modeling for cryptographic systems

Skills

Post-Quantum Cryptography, TLS 1.3, Cryptographic Architecture, Digital Certificates, PKI Infrastructure, Security Engineering, Hybrid Cryptography, Compliance and Standards, Technical Documentation, System Architecture, Problem Solving, Stakeholder Management