PKI, Cryptography & Zero Trust Architect (Hybrid PQC)

Ironbow; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Iron Bow Technologies seeks a PKI, Cryptography and Zero Trust Architect to lead modernization of the Government’s enterprise PKI, key-management, and ZTA, with hybrid classical/PQC designs. Primarily remote with limited travel to client facilities; candidate should have deep PKI/KMS/HSM experience and familiarity with FIPS 203–205 and NIST SP 800-207.

The role requires experience designing enterprise PKI and hybrid PQC architectures, and the ability to integrate cryptographic controls with ICAM

Qualifications

• Demonstrated enterprise PKI architecture and operations experience.
• Demonstrated enterprise KMS and HSM architecture experience.
• Strong understanding of Zero Trust architecture and NIST SP 800-207.
• Experience with HSM-backed roots of trust and ICAM integration.
• Working knowledge of FIPS 203, 204, and 205 and their HSM implications.
• Demonstrated experience designing hybrid classical/PQC architectures or cryptographic modernization strategies.

Responsibilities

• Develop enterprise PKI, KMS, cryptographic, and HSM architecture supporting VA operational and cybersecurity requirements.
• Architect HSM-backed roots of trust and integration with enterprise Certificate Authorities and KMS platforms.
• Design Zero Trust cryptographic controls aligned with NIST SP 800-207 and VA Critical Security Controls.
• Integrate HSM architecture with enterprise ICAM services, machine identity, authentication, authorization, and least-privilege controls.
• Design hybrid classical/post-quantum cryptographic architectures supporting phased PQC adoption.
• Architect parallel PQC/hybrid CA hierarchies to enable transition without disruption to production PKI.
• Develop approaches for cross-certification, new trust-anchor distribution, certificate issuance/validation, revocation, OCSP, and enrollment.
• Support development of the Zero Trust Implementation Plan and define measurable Zero Trust maturity targets.
• Design management-plane segmentation, mutually authenticated communications, machine identity, privileged-access controls, quorum control, and tamper-evident audit capabilities.
• Support development and maintenance of the Crypto Agility Plan and Cryptographic Bill of Materials.
• Evaluate architectural impacts of evolving NIST, IETF, CNSA 2.0, and Federal cryptographic standards.

Skills

Enterprise PKI architecture

KMS & HSM architecture

Zero Trust architecture

NIST SP 800-207

FIPS 203/204/205

Hybrid classical/PQC designs

Tools

Microsoft ADCS

Job description

Iron Bow Technologies seeks a PKI, Cryptography and Zero Trust Architect to lead modernization of the Government’s enterprise PKI, key-management, and ZTA, with hybrid classical/PQC designs. Primarily remote with limited travel to client facilities; candidate should have deep PKI/KMS/HSM experience and familiarity with FIPS 203–205 and NIST SP 800-207.

The role requires experience designing enterprise PKI and hybrid PQC architectures, and the ability to integrate cryptographic controls with ICAM