Quantum-Safe PKI Architect: PQC, HSMs & Key Lifecycle

Development InfoStructure; Arlington (VA); Hybrid; USD 120.000 - 180.000; Vollzeit

Zusammenfassung

Devis is seeking a PKI and Key Management Architect to design and build a quantum-safe public-key infrastructure for a NATO-led pilot, focusing on PQC modes, certificate chains, and secure credential lifecycles.

This role requires hybrid work from Arlington, VA with travel to The Hague. The ideal candidate has 5+ years in PKI, HSM integration, and knowledge of PQC algorithms and NIST SP 800-90B; the role demonstrates end-to-end key management and zeroization of key material.

Qualifikationen

• Bachelor’s degree in a computer-related field.
• 5+ years of PKI, key management or security engineering.
• Experience designing or operating an enterprise PKI, including certificate authority hierarchies and revocation through CRL and OCSP.
• Experience integrating a PKI or key management system with HSMs.
• Working knowledge of PQC signature algorithms (ML-DSA and SLH-DSA) and hybrid or composite certificates.

Aufgaben

• Design the certificate hierarchy and trust arrangements for hybrid and pure PQC modes.
• Design certificate chains from root to end entity, including hybrid or composite options, parallel operation of classical and PQC chains, and PQC-signed revocation through both CRL and OCSP.
• Assess the operational and engineering effects of post-quantum certificates and keys, such as larger certificate and message sizes.
• Demonstrate issuance, renewal and revocation across representative pilot services.
• Document the key lifecycle: generation, storage, backup, rotation periods and destruction.
• Integrate the PKI with HSM and key management capabilities through documented, reusable interfaces.
• Help select an HSM whose PQC algorithms are covered by FIPS 140-3 validation and that is an approved product for NATO use.
• Assess the entropy sources used for key generation against NIST SP 800-90B.
• Protect private keys through their lifecycle, demonstrate the controls work, and zeroize key material at the end of the pilot.

Kenntnisse

PKI design

Security engineering

Documentation

Collaboration

Ausbildung

Bachelor’s degree in a computer-related field

Tools

HSM integration

NIST SP 800-90B

Jobbeschreibung

Devis is seeking a PKI and Key Management Architect to design and build a quantum-safe public-key infrastructure for a NATO-led pilot, focusing on PQC modes, certificate chains, and secure credential lifecycles.

This role requires hybrid work from Arlington, VA with travel to The Hague. The ideal candidate has 5+ years in PKI, HSM integration, and knowledge of PQC algorithms and NIST SP 800-90B; the role demonstrates end-to-end key management and zeroization of key material.