Post-Quantum Cryptography (PQC) / Crypto Security Architect
Job Location: Bangalore / Pune
Experience: 10+ Years
Employment Type: Full Time
Job Summary
We are looking for an experienced Cryptography / Cyber Security Architect with strong expertise in enterprise cryptographic controls and emerging Post-Quantum Cryptography (PQC) standards. The role will focus on assessing quantum-related risks, defining crypto-agile architectures and developing practical migration roadmaps for enterprise and regulated environments.
The ideal candidate should have a strong foundation in RSA, ECC, PKI, X.509, TLS/SSL, SSH, IPsec, digital signatures, HSM/KMS and hands-on understanding of NIST PQC algorithms and hybrid cryptographic migration patterns.
Key Responsibilities
- Assess enterprise cryptographic environments and identify quantum-related risks and vulnerabilities.
- Develop crypto-agility reference architectures and hybrid cryptographic design patterns.
- Define prioritized Post-Quantum Cryptography migration roadmaps aligned with business and technology priorities.
- Provide expertise across PKI, certificates, digital signatures, HSM, KMS and enterprise cryptographic controls.
- Evaluate existing cryptographic implementations and recommend modernization approaches.
- Develop risk-scoring models, architecture assessments and technical recommendations.
- Conduct client workshops and communicate complex cryptographic concepts to technical and senior stakeholders.
- Create executive-ready technical narratives, architecture documents and assurance notes.
- Support security architecture, threat modeling and cloud security initiatives.
Required Skills
- Strong understanding of RSA, ECC, PKI, X.509, TLS/SSL, SSH, IPsec and digital signatures.
- Strong knowledge of certificate lifecycle management, HSM and KMS concepts.
- Hands-on familiarity with security architecture, threat modeling, cloud security and enterprise cryptographic controls.Working knowledge of NIST Post-Quantum Cryptography (PQC) standards.
- Knowledge of ML-KEM / Kyber, ML-DSA / Dilithium and SLH-DSA / SPHINCS+.
- Understanding of hybrid cryptography and PQC migration patterns.
- Ability to create reference architectures, migration roadmaps and risk-scoring models.
- Strong stakeholder management, consulting and communication skills.
Good to Have
- Experience in BFSI, banking, payments, regulated workloads, identity platforms or high-value data protection environments.
- Exposure to OpenSSL, liboqs, PQClean, Bouncy Castle and PKCS#11.
- Experience with cloud KMS/HSM platforms and cryptographic tooling.
- Familiarity with NIST, FIPS, ETSI and CNSA 2.0 standards.
- Understanding of sector-specific regulatory and security requirements.
Key Deliverables
- Quantum-risk assessment approach
- Crypto-agility reference architecture
- Hybrid cryptographic design patterns
- Prioritized PQC migration roadmap
- Client workshop outputs
- Architecture assurance and technical assessment notes
Candidate Profile
We are looking for someone who can combine deep cryptography/security knowledge with architecture and consulting skills. Candidates should be comfortable working with technical teams as well as senior business/client stakeholders and translating complex cryptographic risks into clear, actionable migration strategies.