Crypto, PQC Architect, Post Quantum, CBOM, NIST, Python, Java, C#

Crypto & PQC Architect is required to work on a remote freelance assignment on a six monthly rolling contract supporting a global enterprise. The Crypto & PQC Architect will have at least 15 years of experience working within Security, Info Sec and most recently Quantum Computing. The Crypto & PQC Architect will oversee creating a Crypto Bill of Materials (CBOM) for critical applications., We are seeking an experienced Crypto and Quantum Security Architect to lead a critical engagement. You will be instrumental in guiding Customer’s Post-Quantum Cryptography (PQC) readiness program. The initial focus of this role will be to establish a comprehensive Crypto Bill of Materials (CBOM) for the most critical applications, a foundational step in their journey towards quantum-resistant security.

This is a hands-on role that requires both architectural guidance and technical expertise to deploy and manage crypto inventory solutions.

Key Responsibilities:

PQC Program Leadership: Spearhead the PQC readiness initiative, acting as the primary technical advisor and subject matter expert on all aspects of cryptographic modernization.

Crypto Inventory Tool Deployment: Take ownership of the end-to-end implementation and configuration of crypto inventory tools within the infrastructure.

Crypto Asset Discovery: Utilize the deployed tools to conduct a discovery of all cryptographic assets, including algorithms, protocols, certificates, and keys, across the high-critical applications.

Source Code Analysis: Apply basic programming and Scripting skills to generate and interpret crypto inventories from the source code of bespoke, in-house applications where standard tools may not suffice.

Crypto Bill of Materials (CBOM) Development: Create and maintain a detailed and accurate Crypto Bill of Materials (CBOM) for applications identified as critical

Vulnerability and Risk Analysis: Analyze the CBOM to identify cryptograp

Reporting and Compliance: Prepare and submit comprehensive reports, detailing the findings from the CBOM and outlining the Customer’s PQC readiness posture.

Stakeholder Collaboration: Work closely with application owners, development teams, and security personnel to ensure a collaborative and efficient engagement.

Cryptographic Expertise: A strong and demonstrable background in applied cryptography, including a understanding of symmetric and asymmetric encryption, digital signatures, hash functions, and key management principles.

Post-Quantum Cryptography (PQC) Knowledge: knowledge of PQC algorithms, the ongoing standardization efforts (eg, NIST PQC), and the practical challenges associated with migrating to quantum-resistant cryptography.

Solution Implementation Experience: Hands-on experience in deploying, configuring, and managing enterprise security solutions, specifically crypto inventory or code analysis tools.

Crypto Inventory and CBOM Experience: Experience with crypto discovery tools and the creation and management of a Crypto Bill of Materials (CBOM).

Programming and Scripting Skills: Understanding of one or more programming languages (eg, Python, Java, C#) with the ability to read source code, identify cryptographic functions, and write scripts to automate inventory generation.

Consulting and Communication: Excellent communication, presentation, and consulting skills, with the ability to articulate complex technical concepts to both technical and non-technical stakeholders.

Problem-Solving and Analytical Skills: A methodical and analytical approach to problem-solving, with a keen eye for detail.

Educational Background: A Bachelor’s or Master’s degree in Computer Science, Information Security, Mathematics, or a related field. Relevant certifications (eg, CISSP, CISM, or specialized cryptography certifications) are highly desirable.