Remote PKI, Crypto & Zero-Trust Architect

Iron Bow Technologies; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

Iron Bow Technologies is seeking a PKI, Cryptography, and Zero Trust Architect to lead the modernization of the government’s enterprise PKI, key-management, and Zero Trust environments. You will define architectures that enable coexistence of classical and post-quantum cryptography during phased transitions.

The role requires hands-on experience with enterprise PKI, key-management, and HSMs, plus familiarity with FIPS and NIST SP 800-207. Primarily remote with limited travel to client facilities.

Qualifications

• Experience designing and operating enterprise PKI and key-management architectures.
• Strong understanding of Zero Trust design and NIST SP 800-207.
• Familiarity with FIPS 203, 204, and 205 and their HSM implications.
• Experience with hybrid classical/Post-quantum cryptography approaches.
• Ability to design PKI/KMS architectures aligned with VA/NIST standards.

Responsibilities

• Develop enterprise PKI, KMS, cryptographic, and HSM architecture supporting VA operational and cybersecurity requirements.
• Architect HSM-backed roots of trust and integration with enterprise Certificate Authorities and KMS platforms.
• Design Zero Trust cryptographic controls aligned with NIST SP 800-207 and VA Critical Security Controls.
• Integrate HSM architecture with enterprise ICAM services, machine identity, authentication, authorization, and least-privilege controls.
• Design hybrid classical/post-quantum cryptographic architectures supporting phased PQC adoption.
• Architect parallel PQC/hybrid CA hierarchies to enable transition without disruption to production PKI.

Skills

Enterprise PKI

KMS architecture

HSM architecture

Zero Trust

NIST SP 800-207

Hybrid PQC

FIPS 203/204/205

Education

CISSP-ISSAP

Tools

Microsoft ADCS

Enterprise certificate services

Job description

Iron Bow Technologies is seeking a PKI, Cryptography, and Zero Trust Architect to lead the modernization of the government’s enterprise PKI, key-management, and Zero Trust environments. You will define architectures that enable coexistence of classical and post-quantum cryptography during phased transitions.

The role requires hands-on experience with enterprise PKI, key-management, and HSMs, plus familiarity with FIPS and NIST SP 800-207. Primarily remote with limited travel to client facilities.