Post-Quantum Crypto Architect

Starling; Cardiff; Hybrid; GBP 90,000 - 125,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Pension scheme

Volunteering time

Life insurance

Private Medical Insurance

Perkbox discounts

Cycle to Work

EV leasing

Job summary

Starling is seeking a mid-to-senior Information Security Architect to lead Post-Quantum Cryptography (PQC) strategy and crypto-architecture across cloud and on-prem environments. You will guide PKI/HSM implementations, crypto-agility, and secure design reviews with engineering teams.

The role sits within a hybrid model, with office collaboration in Cardiff, London, and other UK sites, and focuses on delivering scalable, secure infrastructures for modern digital banking.

Qualifications

• Proven track record as Information Security Architect or Senior Security Engineer.
• Strong cryptography knowledge: PKI, HSMs, key management, modern cipher suites.
• Understanding of PQC, NIST standards, and crypto-agility strategies.
• Experience performing threat modeling on cloud-native architectures (AWS/GCP).
• Ability to translate security requirements into pragmatic designs for engineering teams.
• Excellent written and verbal communication with senior stakeholders.

Responsibilities

• Architect end-to-end security solutions for cloud-native apps and banking platforms.
• Develop the Post-Quantum cryptography transition roadmap and crypto-inventory.
• Perform threat modeling and risk assessments on platform architectures.
• Define and promote cryptographic standards and key lifecycle management.
• Review RFCs/ADRs to ensure alignment with security guardrails.
• Mentor teams on cryptographic implementations and data protection.

Skills

Security Architecture

Cryptography

Post-Quantum

Threat Modeling

Cloud Security

Communication

Kubernetes

PKI/HSM

Tools

SABSA

KMS

Kubernetes

Job description

Starling is seeking a mid-to-senior Information Security Architect to lead Post-Quantum Cryptography (PQC) strategy and crypto-architecture across cloud and on-prem environments. You will guide PKI/HSM implementations, crypto-agility, and secure design reviews with engineering teams.

The role sits within a hybrid model, with office collaboration in Cardiff, London, and other UK sites, and focuses on delivering scalable, secure infrastructures for modern digital banking.