Cryptography Architect – Crypto & Post-Quantum

Xcede Recruitment Solutions; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Remote working

6-month contract

Job summary

Xcede Recruitment Solutions is seeking an experienced Cryptography Architect for a 6-month contract with a September start. This hands-on role focuses on deploying crypto-inventory tooling, mapping cryptographic assets, and building a CBOM across critical applications as part of a PQC readiness programme.

You will work with application owners, security teams and developers to identify cryptography usage, assess risks and advise remediation and migration strategies while aligning with PQC

Qualifications

• Extensive experience in data security, cryptography or security architecture.
• Strong knowledge of symmetric and asymmetric encryption, digital signatures, hashing, certificates and key management.
• Good understanding of PQC algorithms, crypto-agility and NIST standardisation.
• Previous experience with cryptographic discovery tools and CBOM creation.
• Hands-on experience deploying enterprise security or source-code analysis solutions.
• Ability to review source code and script using Python, Java or C#.
• Strong consulting, stakeholder management and communication skills.
• Relevant security certifications such as CISSP, CISM or specialist cryptography qualifications would be advantageous.

Responsibilities

• Lead the technical delivery of the PQC-readiness programme.
• Act as the subject-matter expert for cryptography, crypto-agility and quantum-resistant security.
• Deploy, configure and manage cryptographic inventory and code-analysis tools.
• Discover and document cryptographic algorithms, protocols, certificates, libraries and keys.
• Develop and maintain detailed CBOMs for critical applications and platforms.
• Review bespoke application source code where automated discovery tools are insufficient.
• Use scripting to automate crypto discovery and inventory generation.
• Assess current cryptographic implementations against emerging PQC standards.
• Identify vulnerable, deprecated and non-PQC-compliant algorithms and dependencies.
• Produce risk assessments, technical findings and remediation recommendations.
• Support the development of a practical roadmap for migration to quantum-resistant cryptography.
• Present findings clearly to both technical and non-technical stakeholders.

Skills

Cryptography

PQC (Post-Quantum Cryptography)

Crypto inventory tooling

CBOM creation

Python/Java/C#

Security architecture

Stakeholder management

Tools

Crypto inventory tools

Code-analysis tools

Job description

Cryptography Architect – Crypto & Post-Quantum

6-month contract

September Start date

Outside IR35 - Market rate

Remote Working

We are seeking an experienced Crypto & PQC Architect to lead a critical post-quantum cryptography readiness programme. This hands-on role will focus on deploying cryptographic inventory tools, discovering cryptographic assets and developing a comprehensive Crypto Bill of Materials (CBOM) across business-critical applications.

This is a hands-on architecture role focused on assessing the organisation's existing cryptographic landscape and establishing a clear roadmap towards quantum-resistant security. The initial priority will be to deploy crypto-inventory tooling and develop a comprehensive Crypto Bill of Materials (CBOM) across business-critical applications.

The role will involve working closely with application owners, security teams and developers to identify where cryptography is used, assess associated risks and recommend appropriate remediation and migration strategies.

Key responsibilities:

• Lead the technical delivery of the PQC-readiness programme.
• Act as the subject-matter expert for cryptography, crypto-agility and quantum-resistant security.
• Deploy, configure and manage cryptographic inventory and code-analysis tools.
• Discover and document cryptographic algorithms, protocols, certificates, libraries and keys.
• Develop and maintain detailed CBOMs for critical applications and platforms.
• Review bespoke application source code where automated discovery tools are insufficient.
• Use scripting to automate crypto discovery and inventory generation.
• Assess current cryptographic implementations against emerging PQC standards.
• Identify vulnerable, deprecated and non-PQC-compliant algorithms and dependencies.
• Produce risk assessments, technical findings and remediation recommendations.
• Support the development of a practical roadmap for migration to quantum-resistant cryptography.
• Present findings clearly to both technical and non-technical stakeholders.

Essential experience:

• Extensive experience in data security, cryptography or security architecture.
• Strong knowledge of symmetric and asymmetric encryption, digital signatures, hashing, certificates and key management.
• Good understanding of PQC algorithms, crypto-agility and NIST standardisation.
• Previous experience with cryptographic discovery tools and CBOM creation.
• Hands-on experience deploying enterprise security or source-code analysis solutions.
• Ability to review source code and script using Python, Java or C#.
• Strong consulting, stakeholder management and communication skills.

Relevant security certifications such as CISSP, CISM or specialist cryptography qualifications would be advantageous.