Post-Quantum Security Architect

Starling; Manchester; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

25 days holiday

Birthday leave

Pension scheme

Private Medical Insurance

Job summary

Starling is recruiting a mid-to-senior Information Security Architect to own the Post-Quantum Cryptography (PQC) initiative and lead crypto‑security across our cloud-native stack. You will drive crypto-inventory, assess PQC algorithms, and shape architectures that enable crypto‑agility while protecting customers and regulatory obligations.

You will collaborate with software engineers, cloud architects, and security operations to embed security into the development lifecycle, managing designs,

Qualifications

• Proven track record as an Information Security Architect or Senior Security Engineer.
• Strong knowledge of cryptography, PKI, and key management systems.
• Experience with cloud-native architectures and security in AWS/GCP.

Responsibilities

• Architect end-to-end security solutions for cloud-native apps and banking platforms.
• Develop and lead Post-Quantum Cryptography transition roadmap and crypto-inventory.
• Perform threat modeling and risk assessments on platform architectures.
• Define enterprise cryptographic management standards (key lifecycle, HSMs, cipher suites).
• Review RFCs/ADRs to ensure alignment with security guardrails and regulations.
• Mentor teams on cryptographic implementations and secure data handling.

Skills

Security Architecture

Cryptography

Post-Quantum Cryptography

Threat Modeling

Cloud Security

Tools

PKI

HSMs

KMS

Service Mesh

AWS

GCP

Kubernetes

Job description

Starling is recruiting a mid-to-senior Information Security Architect to own the Post-Quantum Cryptography (PQC) initiative and lead crypto‑security across our cloud-native stack. You will drive crypto-inventory, assess PQC algorithms, and shape architectures that enable crypto‑agility while protecting customers and regulatory obligations.

You will collaborate with software engineers, cloud architects, and security operations to embed security into the development lifecycle, managing designs,