PQC Architect (Post-Quantum Cryptography Architect)

Architect PQC Solutions: Design and implement quantum-resistant cryptographic architectures across cloud platforms, enterprise infrastructure, hardware security modules (HSMs), and data-at-rest/in-transit frameworks. Lead Migration Strategy: Develop, refine, and execute a comprehensive cryptographic inventory and migration blueprint based on the NIST PQC standards (e.g., ML-KEM, ML-DSA, FN-DSA, XMSS/LMS).Implement Crypto-Agility: Build and embed crypto-agile frameworks into software development lifecycles (SDLC) and network protocols to allow seamless algorithmic swapping without system downtime. Conduct Risk Assessments: Assess current infrastructure vulnerabilities against “Store Now, Decrypt Later” (SNDL) attacks and perform deep-dive threat modeling on third-party integrations and internal code. Collaborate Cross-Functionally: Partner with Product, DevOps, Hardware, and Enterprise Infrastructure teams to guide the integration of quantum-safe Public Key Infrastructures (PKI) and hybrid

cryptographic protocols. Drive Standards & Compliance: Monitor global regulatory updates (such as CNSA 2.0 timelines or regional compliance standards) to ensure internal roadmaps meet or exceed impending legal mandates. Deep Cryptographic Expertise: Strong foundational knowledge of advanced cryptography, including asymmetric/symmetric key schemes, PKI, digital signatures, and mathematical foundations of PQC (e.g., lattice-based, code-based, or multivariate cryptography).Architecture Experience: Proven track record designing enterprise-grade security architectures, securing network protocols (TLS, SSH, IPSec), and configuring modern HSMs, KMS, and IAM systems. Software Proficiency: Hands-on experience developing or integrating cryptographic libraries (e.g., Open QuantumSafe, Bouncy Castle, OpenSSL) using languages like C/C++, Rust, Go, or Python. Industry Standards Knowledge: Strong familiarity with the NIST PQC standardization process, IETF draft specifications, and migration guidelines from bodies like CISA, NSA, or ENISA. Education & Background: Active participation in cryptographic research communities, standardization bodies, or open-source PQC projects. Relevant industry certifications (e.g., CISSP, ISSAP).