Cybersecurity Architect, Post-Quantum Cryptography (PQC)

The Cybersecurity Architect, PQC will report into the Senior Cryptography Expert as part of CISOs Cryptographic Security Center of Excellence. The person in this position will be supporting Citi’s Quantum Readiness Program and the industry movement to Post-Quantum Cryptography (PQC). This position requires commercial awareness in support of discussing PQC developments with vendors and specifically around those products which are used by Citi technologists. Expert senior stakeholder communication and diplomacy skills are required to guide, influence, and convince others whether they be colleagues in other areas or occasional external customers. This role brings a significant impact on the area through complex deliverables in terms of cryptographic reviews, structured migration/mitigation plans, and coordination with application owners and the Cryptographic Security Center of Excellence all to support the delivery of Citi’s Quantum Readiness Program. The ideal candidate will provide advice and counsel related to the cryptographic technology or operations of the business. While this is an individual contributor Subject Matter Expert (SME) role, the position will work across all lines of business, all applications, and geographies. In addition, this role will face-off to external bodies & groups dealing with cryptographic-related efforts such as NIST, BPI, ETSI, CABForum, PKI Consortium and local regulators.

Responsibilities

• Operate as a Subject Matter Expert on Traditional and Post-Quantum Cryptography algorithms, practices, and use cases.
• Support Citi’s Quantum Readiness Program to ensure Citi’s data is protected from cryptographically relevant quantum computing threats.
• Co-own the PQC readiness view of the cryptographic inventory. Reconcile inventory tool outputs with discovery tool outputs to reduce or eliminate manual enrichment required for PQC reporting.
• Provide support and effective challenge to business and technology representatives and leadership on the secure implementation of cryptography.
• Demonstrate deep understanding of practical cryptography and the impacts and considerations of migrating to post-quantum use cases.
• Deliver professional presentations on emerging cryptography trends and key topics, tailoring business-impact messaging to different levels of expertise and leadership.
• Play a key role in developing and communicating a risk-based, data-driven governance strategy and roadmap for Citi’s Quantum Readiness Program, in partnership with architecture, engineering, operations, information security officers, and other stakeholders.
• Provide technical expertise in symmetric and asymmetric encryption, digital signatures, hashing, Distributed Ledger Technology (DLT), and related key and certificate management concerns.
• Identify tools needed for cryptography, key, and certificate governance. Lead proofs of concept (PoCs) and oversee implementations as needed.
• Work with application, infrastructure, architecture, and engineering teams to translate system and business requirements into implementation requirements, helping to embed PQC and crypto-agility requirements into existing roadmaps, technology refresh, and modernization efforts.
• Build internal relationships and help drive program-level timelines and requirements across the enterprise globally.
• Participate in new product and vendor assessments and develop PoCs and trials to support deployment and adoption decisions.
• Partner with Citi’s Third-Party Risk Management and Supplier teams to assess vendor PQC roadmaps. Ensure PQC requirements are incorporated into contracts and renewals.
• Establish additional reporting and metrics, including KPIs and KRIs, for governance, senior leadership, internal audit, and regulatory reporting.
• Monitor NIST, IETF, CNSA, regulatory, and industry developments to determine the impact of these developments on internal guidance and program timelines.
• Respond to the internal and external/regulatory requests regarding program readiness and alignment.

• 6+ years’ experience in cybersecurity, cryptography, or a control-related function at enterprise organizations with knowledge and/or prior consulting support of Post-Quantum migration strategies and timelines.
• Ability to architect PQC deployments within existing infrastructure use cases, e.g. PKI, ATM, Payments and hardware components, e.g. HSMs, Load Balancers, Network Devices, and embedded endpoints.
• Experience working with 3rd party / vendor tools and applications with respect to their cryptographic support and upgrade pathways.
• Working knowledge of public key infrastructure (PKI), application and data security, symmetric encryption systems, and implementation of these.
• Expert diplomacy skills with the ability to guide, influence, and convince colleagues across the global organization with engagement of both technical and non-technical stakeholders
• Strong understanding of operating systems, network security infrastructure, and one or more scripting languages (e.g. Python, bash, etc.).
• Strong understanding of AI capabilities and utilization. Able to leverage Citi’s generative AI tools to accelerate deliverables.
• Prior Enterprise systems implementation and / or migration and strategy development experience a plus.
• Solid understanding of cryptography, algorithms, and implementations & maintains/enhances knowledge through research, self-study and engagement.
• Solid understanding of technologies where cryptography is leveraged & implemented such as software, networking, identity systems, and data platforms.
• Experience with public cloud technologies and their use of cryptography and key management.

Education

• Bachelor’s degree in Computer Science or equivalent relevant experience.
• Master’s degree preferred.

$113,840.00 - $170,760.00

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

Working at Citi is far more than just a job. A career with us means joining a team of approximately 219,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact., Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.