Cybersecurity Architect, Post-Quantum Cryptography (PQC)

Citi Group; Jacksonville (FL); On-site; USD 150,000 - 210,000; Full time

Job summary

Citi in Jacksonville is seeking a Cybersecurity Architect, PQC, reporting to the Senior Cryptography Expert, to advance Citi’s Quantum Readiness Program and its Post-Quantum cryptography initiatives across diverse applications and geographies.

The role requires deep cryptography expertise, ability to influence senior stakeholders, and hands-on guidance to secure cryptographic implementations, migration plans, and governance for PQC adoption.

Qualifications

• Expertise in traditional and post-quantum cryptography algorithms and practices.
• Ability to communicate with senior stakeholders and external groups.
• Experience guiding cryptographic strategy across multiple teams and geographies.

Responsibilities

• Operate as a Subject Matter Expert on Traditional and Post-Quantum Cryptography algorithms, practices, and use cases.
• Support Citi's Quantum Readiness Program to protect data from quantum threats.
• Co-own the PQC readiness view of the cryptographic inventory and reconcile outputs with discovery tools.
• Provide support and effective challenge to business and technology on secure cryptography.
• Demonstrate deep understanding of practical cryptography and migration to post-quantum use cases.
• Deliver presentations on emerging cryptography trends for leadership.
• Develop and communicate a risk-based governance roadmap for Citi's Quantum Readiness Program.
• Provide technical expertise in symmetric and asymmetric encryption, digital signatures, hashing, distributed ledger technology, and key/certificate management.
• Identify tools for cryptography, key, and certificate governance; lead PoCs and oversee implementations.
• Translate system and business requirements into implementation requirements embedding PQC into roadmaps.

Skills

Post-Quantum Cryptography

Cryptography

Security architecture

Job description

About Citi:

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management. As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients' best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

The Role:

The Cybersecurity Architect, PQC will report into the Senior Cryptography Expert as part of CISOs Cryptographic Security Center of Excellence. The person in this position will be supporting Citi's Quantum Readiness Program and the industry movement to Post-Quantum Cryptography (PQC). This position requires commercial awareness in support of discussing PQC developments with vendors and specifically around those products which are used by Citi technologists. Expert senior stakeholder communication and diplomacy skills are required to guide, influence, and convince others whether they be colleagues in other areas or occasional external customers. This role brings a significant impact on the area through complex deliverables in terms of cryptographic reviews, structured migration/mitigation plans, and coordination with application owners and the Cryptographic Security Center of Excellence all to support the delivery of Citi's Quantum Readiness Program. The ideal candidate will provide advice and counsel related to the cryptographic technology or operations of the business. While this is an individual contributor Subject Matter Expert (SME) role, the position will work across all lines of business, all applications, and geographies. In addition, this role will face-off to external bodies & groups dealing with cryptographic-related efforts such as NIST, BPI, ETSI, CABForum, PKI Consortium and local regulators.

Responsibilities

• Operate as a Subject Matter Expert on Traditional and Post-Quantum Cryptography algorithms, practices, and use cases.
• Support Citi's Quantum Readiness Program to ensure Citi's data is protected from cryptographically relevant quantum computing threats.
• Co-own the PQC readiness view of the cryptographic inventory. Reconcile inventory tool outputs with discovery tool outputs to reduce or eliminate manual enrichment required for PQC reporting.
• Provide support and effective challenge to business and technology representatives and leadership on the secure implementation of cryptography.
• Demonstrate deep understanding of practical cryptography and the impacts and considerations of migrating to post-quantum use cases.
• Deliver professional presentations on emerging cryptography trends and key topics, tailoring business-impact messaging to different levels of expertise and leadership.
• Play a key role in developing and communicating a risk-based, data-driven governance strategy and roadmap for Citi's Quantum Readiness Program, in partnership with architecture, engineering, operations, information security officers, and other stakeholders.
• Provide technical expertise in symmetric and asymmetric encryption, digital signatures, hashing, Distributed Ledger Technology (DLT), and related key and certificate management concerns.
• Identify tools needed for cryptography, key, and certificate governance. Lead proofs of concept (PoCs) and oversee implementations as needed.
• Work with application, infrastructure, architecture, and engineering teams to translate system and business requirements into implementation requirements, helping to embed PQC and crypto-agility requirements into existing roadmaps, technology refresh, and mode