PKI, Cryptography and Zero Trust Architect

Iron Bow Technologies; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

Iron Bow Technologies is seeking a PKI, Cryptography, and Zero Trust Architect to lead the modernization of the government’s enterprise PKI, key-management, and Zero Trust environments. You will define architectures that enable coexistence of classical and post-quantum cryptography during phased transitions.

The role requires hands-on experience with enterprise PKI, key-management, and HSMs, plus familiarity with FIPS and NIST SP 800-207. Primarily remote with limited travel to client facilities.

Qualifications

• Experience designing and operating enterprise PKI and key-management architectures.
• Strong understanding of Zero Trust design and NIST SP 800-207.
• Familiarity with FIPS 203, 204, and 205 and their HSM implications.
• Experience with hybrid classical/Post-quantum cryptography approaches.
• Ability to design PKI/KMS architectures aligned with VA/NIST standards.

Responsibilities

• Develop enterprise PKI, KMS, cryptographic, and HSM architecture supporting VA operational and cybersecurity requirements.
• Architect HSM-backed roots of trust and integration with enterprise Certificate Authorities and KMS platforms.
• Design Zero Trust cryptographic controls aligned with NIST SP 800-207 and VA Critical Security Controls.
• Integrate HSM architecture with enterprise ICAM services, machine identity, authentication, authorization, and least-privilege controls.
• Design hybrid classical/post-quantum cryptographic architectures supporting phased PQC adoption.
• Architect parallel PQC/hybrid CA hierarchies to enable transition without disruption to production PKI.

Skills

Enterprise PKI

KMS architecture

HSM architecture

Zero Trust

NIST SP 800-207

Hybrid PQC

FIPS 203/204/205

Education

CISSP-ISSAP

Tools

Microsoft ADCS

Enterprise certificate services

Job description

Iron Bow Technologies is for people who believe trust is paramount , transformation is embraced , and the future is here , because \"What we do matters\" !

We are a next generation solutions provider, delivering mission success across government, healthcare, and commercial industries. Iron Bow relies on our passionate people , long standing partnerships , and strategic thinking to solve your most critical challenges.

Whether we team with clients, colleagues, or partners, we put each other first. It’s The Iron Bow Way.

THE OPPORTUNITY

The PKI, Cryptography, and Zero Trust Architect will lead the architecture and modernization of the Government’s enterprise PKI, key-management, HSM-backed trust, Zero Trust, and post-quantum cryptographic environment. The Architect defines architectures that allow classical and post-quantum cryptography to coexist during the customer’s phased transition.

The position requires demonstrated experience designing and operating enterprise PKI and key-management architectures and working knowledge of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). The candidate should be able to demonstrate prior work involving hybrid classical/PQC architectures and Zero Trust designs consistent with NIST SP 800-207. Primarily remote. Limited travel to customer facility.

HOW YOU'LL MAKE AN IMPACT

• Develop enterprise PKI, KMS, cryptographic, and HSM architecture supporting VA operational and cybersecurity requirements.
• Architect HSM-backed roots of trust and integration with enterprise Certificate Authorities and KMS platforms.
• Design Zero Trust cryptographic controls aligned with NIST SP 800-207 and VA Critical Security Controls.
• Integrate HSM architecture with enterprise ICAM services, machine identity, authentication, authorization, and least-privilege controls.
• Design hybrid classical/post-quantum cryptographic architectures supporting phased PQC adoption.
• Architect parallel PQC/hybrid CA hierarchies to enable transition without disruption to production PKI.
• Develop approaches for cross-certification, new trust-anchor distribution, certificate issuance/validation, revocation, OCSP, and enrollment.
• Support development of the Zero Trust Implementation Plan and define measurable Zero Trust maturity targets.
• Design management-plane segmentation, mutually authenticated communications, machine identity, privileged-access controls, quorum control, and tamper-evident audit capabilities.
• Support development and maintenance of the Crypto Agility Plan and Cryptographic Bill of Materials.
• Evaluate architectural impacts of evolving NIST, IETF, CNSA 2.0, and Federal cryptographic standards.

SKILLS THAT DRIVE SUCCESS

• Demonstrated enterprise PKI architecture and operations experience.
• Demonstrated enterprise KMS and HSM architecture experience.
• Strong understanding of Zero Trust architecture and NIST SP 800-207.
• Experience with HSM-backed roots of trust and enterprise ICAM integration.
• Working knowledge of FIPS 203, 204, and 205 and their HSM implementation implications.
• Demonstrated experience designing hybrid classical/PQC architectures or cryptographic modernization strategies.

WHAT SETS YOU APART

• CISSP-ISSAP, SABSA, TOGAF, or comparable security/architecture credentials.
• Experience with Federal ICAM/FICAM and PIV/CAC environments.
• Experience with Microsoft ADCS and enterprise certificate services.

WHY YOU'LL LOVE IT!

• You will be part of a company that is growing quickly and values your voice, ideas, and experience
• You will be a key contributor to Iron Bow’s transformational shift in how we deliver value to both customers and employees.
• You will have the pleasure of working with passionate professionals in a culture that fosters a workplace where everyone feels respected, supported and empowered to succeed.

OUR EQUAL OPPORTUNITY EMPLOYER COMMITMENT

Iron Bow Technologies is an Equal Opportunity Employer and is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Iron Bow are based on relevant business considerations, such as operational needs, job requirements and individual qualifications, without regard to race, color, religion, sex, sexual orientation, gender identity and/or gender expression, pregnancy, national origin, age, disability, status as a protected veteran or any other characteristic prohibited by law.Iron Bow will not tolerate discrimination or harassment based on any of these characteristics.