PQC Architect

ADPMN Inc; Alpharetta (GA); Vor Ort; USD 180.000 - 250.000; Vollzeit

Zusammenfassung

ADPMN Inc. seeks a Senior Security Architect to lead post-quantum cryptography initiatives across cloud and on‑prem infrastructures, focusing on PQC design, migration planning, and crypto agility. The role emphasizes integrating robust PKI, HSMs, and cryptographic libraries within enterprise environments.

The candidate will partner with cross-functional teams to align with regulatory timelines and ensure secure, scalable architectures that withstand evolving cryptographic standards.

Qualifikationen

• 13+ years of experience in security architecture.
• Expertise in PQC across cloud and on-prem environments.
• Experience with PKI, HSMs, KMS, and crypto agility in SDLC.

Aufgaben

• Architect PQC solutions across cloud platforms, enterprise infrastructure, and HSMs.
• Lead cryptographic inventory and migration strategy per NIST PQC standards.
• Embed crypto agility into SDLC and network protocols.
• Collaborate with product, DevOps, hardware, and infrastructure teams.
• Monitor regulatory updates to align roadmaps with mandates.

Kenntnisse

IT Infrastructure

Azure IaC

Terraform

Well-Architected Framework

Tools

OpenQuantumSafe

BouncyCastle

OpenSSL

Jobbeschreibung

Primary Skill: IT Infrastructure, Azure IaC Terraform, Azure Well-Architected Framework

Experience: 13 - 15+ years

• Architect PQC Solutions: Design and implement quantum-resistant cryptographic architectures across cloud platforms, enterprise infrastructure, hardware security modules (HSMs), and data-at-rest/in-transit frameworks.
• Lead Migration Strategy: Develop, refine, and execute a comprehensive cryptographic inventory and migration blueprint based on the NIST PQC standards (e.g., ML-KEM, ML-DSA, FN-DSA, XMSS/LMS).
• Implement Crypto-Agility: Build and embed crypto-agile frameworks into software development lifecycles (SDLC) and network protocols to allow seamless algorithmic swapping without system downtime.
• Conduct Risk Assessments: Assess current infrastructure vulnerabilities against 'Store Now, Decrypt Later' (SNDL) attacks and perform deep-dive threat modeling on third-party integrations and internal code.
• Collaborate Cross-Functionally: Partner with Product, DevOps, Hardware, and Enterprise Infrastructure teams to guide the integration of quantum-safe Public Key Infrastructures (PKI) and hybrid cryptographic protocols.
• Drive Standards & Compliance: Monitor global regulatory updates (such as CNSA 2.0 timelines or regional compliance standards) to ensure internal roadmaps meet or exceed impending legal mandates.
• Deep Cryptographic Expertise: Strong foundational knowledge of advanced cryptography, including asymmetric/symmetric key schemes, PKI, digital signatures, and mathematical foundations of PQC (e.g., lattice-based, code-based, or multivariate cryptography).
• Architecture Experience: Proven track record designing enterprise-grade security architectures, securing network protocols (TLS, SSH, IPSec), and configuring modern HSMs, KMS, and IAM systems.
• Software Proficiency: Hands-on experience developing or integrating cryptographic libraries (e.g., OpenQuantumSafe, BouncyCastle, OpenSSL) using languages like C/C++, Rust, Go, or Python.
• Industry Standards Knowledge: Strong familiarity with the NIST PQC standardization process, IETF draft specifications, and migration guidelines from bodies like CISA, NSA, or ENISA.
• Education & Background: Active participation in cryptographic research communities, standardization bodies, or open-source PQC projects.
• Relevant industry certifications (e.g., CISSP, ISSAP).