PKI, Cryptography and Zero Trust Architect

Ironbow; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Iron Bow Technologies seeks a PKI, Cryptography and Zero Trust Architect to lead modernization of the Government’s enterprise PKI, key-management, and ZTA, with hybrid classical/PQC designs. Primarily remote with limited travel to client facilities; candidate should have deep PKI/KMS/HSM experience and familiarity with FIPS 203–205 and NIST SP 800-207.

The role requires experience designing enterprise PKI and hybrid PQC architectures, and the ability to integrate cryptographic controls with ICAM

Qualifications

• Demonstrated enterprise PKI architecture and operations experience.
• Demonstrated enterprise KMS and HSM architecture experience.
• Strong understanding of Zero Trust architecture and NIST SP 800-207.
• Experience with HSM-backed roots of trust and ICAM integration.
• Working knowledge of FIPS 203, 204, and 205 and their HSM implications.
• Demonstrated experience designing hybrid classical/PQC architectures or cryptographic modernization strategies.

Responsibilities

• Develop enterprise PKI, KMS, cryptographic, and HSM architecture supporting VA operational and cybersecurity requirements.
• Architect HSM-backed roots of trust and integration with enterprise Certificate Authorities and KMS platforms.
• Design Zero Trust cryptographic controls aligned with NIST SP 800-207 and VA Critical Security Controls.
• Integrate HSM architecture with enterprise ICAM services, machine identity, authentication, authorization, and least-privilege controls.
• Design hybrid classical/post-quantum cryptographic architectures supporting phased PQC adoption.
• Architect parallel PQC/hybrid CA hierarchies to enable transition without disruption to production PKI.
• Develop approaches for cross-certification, new trust-anchor distribution, certificate issuance/validation, revocation, OCSP, and enrollment.
• Support development of the Zero Trust Implementation Plan and define measurable Zero Trust maturity targets.
• Design management-plane segmentation, mutually authenticated communications, machine identity, privileged-access controls, quorum control, and tamper-evident audit capabilities.
• Support development and maintenance of the Crypto Agility Plan and Cryptographic Bill of Materials.
• Evaluate architectural impacts of evolving NIST, IETF, CNSA 2.0, and Federal cryptographic standards.

Skills

Enterprise PKI architecture

KMS & HSM architecture

Zero Trust architecture

NIST SP 800-207

FIPS 203/204/205

Hybrid classical/PQC designs

Tools

Microsoft ADCS

Job description

PKI, Cryptography and Zero Trust Architect

United States

Iron Bow Technologies is for people who believe trust is paramount , transformation is embraced , and the future is here , because "What we do matters !

We are a next generation solutions provider, delivering mission success across government, healthcare, and commercial industries. Iron Bow relies on our passionate people , long standing partnerships , and strategic thinking to solve your most critical challenges.

Whether we team with clients, colleagues, or partners, we put each other first. It’s The Iron Bow Way.

THE OPPORTUNITY

The PKI, Cryptography, and Zero Trust Architect will lead the architecture and modernization of the Government’s enterprise PKI, key-management, HSM-backed trust, Zero Trust, and post-quantum cryptographic environment. The Architect defines architectures that allow classical and post-quantum cryptography to coexist during the customer’s phased transition.

The position requires demonstrated experience designing and operating enterprise PKI and key-management architectures and working knowledge of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). The candidate should be able to demonstrate prior work involving hybrid classical/PQC architectures and Zero Trust designs consistent with NIST SP 800-207. Primarily remote. Limited travel to customer facility.

HOW YOU'LL MAKE AN IMPACT

• Develop enterprise PKI, KMS, cryptographic, and HSM architecture supporting VA operational and cybersecurity requirements.
• Architect HSM-backed roots of trust and integration with enterprise Certificate Authorities and KMS platforms.
• Design Zero Trust cryptographic controls aligned with NIST SP 800-207 and VA Critical Security Controls.
• Integrate HSM architecture with enterprise ICAM services, machine identity, authentication, authorization, and least-privilege controls.
• Design hybrid classical/post-quantum cryptographic architectures supporting phased PQC adoption.
• Architect parallel PQC/hybrid CA hierarchies to enable transition without disruption to production PKI.
• Develop approaches for cross-certification, new trust-anchor distribution, certificate issuance/validation, revocation, OCSP, and enrollment.
• Support development of the Zero Trust Implementation Plan and define measurable Zero Trust maturity targets.
• Design management-plane segmentation, mutually authenticated communications, machine identity, privileged-access controls, quorum control, and tamper-evident audit capabilities.
• Support development and maintenance of the Crypto Agility Plan and Cryptographic Bill of Materials.
• Evaluate architectural impacts of evolving NIST, IETF, CNSA 2.0, and Federal cryptographic standards.

SKILLS THAT DRIVE SUCCESS

• Demonstrated enterprise PKI architecture and operations experience.
• Demonstrated enterprise KMS and HSM architecture experience.
• Strong understanding of Zero Trust architecture and NIST SP 800-207.
• Experience with HSM-backed roots of trust and enterprise ICAM integration.
• Working knowledge of FIPS 203, 204, and 205 and their HSM implementation implications.
• Demonstrated experience designing hybrid classical/PQC architectures or cryptographic modernization strategies.

WHAT SETS YOU APART

• CISSP-ISSAP, SABSA, TOGAF, or comparable security/architecture credentials.
• Experience with Federal ICAM/FICAM and PIV/CAC environments.
• Experience with Microsoft ADCS and enterprise certificate services.

WHY YOU'LL LOVE IT!

• You will be part of a company that is growing quickly and values your voice, ideas, and experience
• You will be a key contributor to Iron Bow’s transformational shift in how we deliver value to both customers and employees.
• You will have the pleasure of working with passionate professionals in a culture that fosters a workplace where everyone feels respected, supported and empowered to succeed.

OUR EQUAL OPPORTUNITY EMPLOYER COMMITMENT

Iron Bow Technologies is an Equal Opportunity Employer and is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Iron Bow are based on relevant business considerations, such as operational needs, job requirements and individual qualifications, without regard to race, color, religion, sex, sexual orientation, gender identity and/or gender expression, pregnancy, national origin, age, disability, status as a protected veteran or any other characteristic prohibited by law.Iron Bow will not tolerate discrimination or harassment based on any of these characteristics.

Join the Iron Bow team to learn, grow and develop yourself, our customers and, ultimately, our business.