Cryptography Architect – Contract

Oliver James; Dublin; Híbrido; EUR 90.000 - 120.000; A tiempo parcial

Descripción de la vacante

Oliver James Group is seeking a Senior Security Architect in Dublin for a 6-month hybrid contract. You will lead the development of migration plans to integrate Certificate Authorities into an Enterprise PKI and shape post-quantum strategies to protect systems against future quantum threats.

You will oversee key management lifecycles, evaluate cryptographic implementations, and drive governance with reference to FIPS, Common Criteria, and NIST standards.

Formación

• 5+ years in security engineering or cryptographic research.
• Experience with PKI, TLS, and cryptographic algorithms.
• FIPS/NIST or similar standards knowledge.
• CISSP/CISM desirable.

Responsabilidades

• Develop strategies and migration plans for integrating CAs into an Enterprise PKI.
• Drive post-quantum strategy and crypto-agility frameworks.
• Oversee lifecycle of encryption keys and integration with HSMs and KMS.
• Assess cryptographic implementations, APIs, PKI, and TLS for weaknesses.
• Conduct threat modelling across cloud-native apps, microservices, and hybrid infra.
• Establish enterprise cryptographic standards and document designs per standards (FIPS, Common Criteria, NIST).

Conocimientos

Cryptography

Zero Trust

Threat Modelling

PKI Design

Security Architecture

Educación

Bachelor's or Master's in CS/Math/Engineering

Herramientas

HSM

KMS

Descripción del empleo

6-month contract (rolling)

Dublin - Hybrid

Key Responsibilities

• Strategy and Migration Approach: Develop strategies and migration plans for integrating Certificate Authorities (CAs) into an Enterprise Public Key Infrastructure (PKI).
• Post-Quantum Strategy: Drive research, develop transition roadmaps, and establish crypto-agility frameworks to safeguard systems against future quantum computing threats through the adoption of post-quantum cryptographic algorithms.
• Key Management Architecture: Oversee the complete lifecycle of encryption keys, including generation, distribution, rotation, escrow, and secure destruction, as well as integration with Hardware Security Modules (HSMs) and Key Management Systems (KMS).
• Security and Protocol Reviews: Assess cryptographic implementations, API architectures, Public Key Infrastructure (PKI), and Transport Layer Security (TLS) protocols to identify weak algorithms, vulnerabilities, and insecure practices.
• Threat Modelling and Risk Assessment: Conduct technical risk assessments and threat modelling across cloud-native applications, microservices, and hybrid infrastructure environments.
• Standardisation and Governance: Establish enterprise-wide cryptographic standards, produce high- and low-level technical design documentation (HLD/LLD), and ensure alignment with relevant regulatory and security standards, including FIPS, Common Criteria, and NIST.

Qualifications and Requirements

• Education: Bachelor's or Master's degree in Computer Science, Mathematics, Electrical Engineering, or a related technical discipline.
• Core Technical Knowledge: Strong understanding of symmetric and asymmetric cryptography, digital signatures, hash functions, Multi-Party Computation (MPC), and Zero Trust security principles.
• Experience: Typically 5-12+ years of practical experience in security engineering, cryptographic research, or enterprise IT architecture.
• Certifications: Professional qualifications such as CISSP, CISM, or other relevant specialist security certifications are desirable.