Cryptography - Consultant

Summary

Post‐Quantum Cryptography (PQC) Consultant

Supports enterprise readiness for post‐quantum cryptography by identifying cryptographic risk, inventorying quantum‐vulnerable algorithms, and enabling a structured transition to quantum‐resistant cryptography across security, infrastructure, and application environments.

Key Responsibilities

• Assess PQC readiness across PKI, IAM, applications, infrastructure, and data‐in‐transit use cases.
• Validate cryptographic assets (certificates, keys, cipher suites) vulnerable to quantum threats. Work alongside the Centralized Encryption Key project members.
• Support development of PQC roadmaps, crypto‐agility strategies, and prioritized remediation plans.
• Assist with PQC vendor evaluations, requirements definition, and comparative analysis. Translate technical findings into risk‐based insights for security leadership and governance forums.
• Align PQC activities with security architecture, risk management, and regulatory expectations.

Skills & Experience

• Strong foundation in applied cryptography (PKI, TLS, key management, certificates).
• Working knowledge of post‐quantum cryptography concepts and NIST PQC standards.
• Experience with enterprise security architecture, cryptographic inventory, or certificate lifecycle management.
• Ability to operate in complex, regulated environments and communicate clearly with technical and non‐technical stakeholders.
• Experience supporting risk‐based prioritization of cryptographic remediation.
• Familiarity with aligning PQC initiatives to security policies, cryptographic standards, and change management processes.
• Awareness of third‐party and supply‐chain cryptographic risk considerations.

Job Description

Post‐Quantum Cryptography (PQC) Consultant

Supports enterprise readiness for post‐quantum cryptography by identifying cryptographic risk, inventorying quantum‐vulnerable algorithms, and enabling a structured transition to quantum‐resistant cryptography across security, infrastructure, and application environments.

Key Responsibilities

• Assess PQC readiness across PKI, IAM, applications, infrastructure, and data‐in‐transit use cases.
• Validate cryptographic assets (certificates, keys, cipher suites) vulnerable to quantum threats. Work alongside the Centralized Encryption Key project members.
• Support development of PQC roadmaps, crypto‐agility strategies, and prioritized remediation plans.
• Assist with PQC vendor evaluations, requirements definition, and comparative analysis. Translate technical findings into risk‐based insights for security leadership and governance forums.
• Align PQC activities with security architecture, risk management, and regulatory expectations.

Skills & Experience

• Strong foundation in applied cryptography (PKI, TLS, key management, certificates).
• Working knowledge of post‐quantum cryptography concepts and NIST PQC standards.
• Experience with enterprise security architecture, cryptographic inventory, or certificate lifecycle management.
• Ability to operate in complex, regulated environments and communicate clearly with technical and non‐technical stakeholders.
• Experience supporting risk‐based prioritization of cryptographic remediation.
• Familiarity with aligning PQC initiatives to security policies, cryptographic standards, and change management processes.
• Awareness of third‐party and supply‐chain cryptographic risk considerations.