Crypto, PQC Architect, Post Quantum, CBOM, NIST, Python, Java, C#
Crypto & PQC Architect is required to work on a remote freelance assignment on a six monthly rolling contract supporting a global enterprise. The Crypto & PQC Architect will have at least 15 years of experience working within Security, Info Sec and most recently Quantum Computing. The Crypto & PQC Architect will oversee creating a Crypto Bill of Materials (CBOM) for critical applications.
Crypto & PQC Architect will possess the following criteria and will be immediately available to start.
Job Description (Crypto & PQC Architect)
Summary:
We are seeking an experienced Crypto and Quantum Security Architect to lead a critical engagement. You will be instrumental in guiding Customer's Post-Quantum Cryptography (PQC) readiness program. The initial focus of this role will be to establish a comprehensive Crypto Bill of Materials (CBOM) for the most critical applications, a foundational step in their journey towards quantum-resistant security.
This is a hands-on role that requires both architectural guidance and technical expertise to deploy and manage crypto inventory solutions.
Key Responsibilities:
PQC Program Leadership: Spearhead the PQC readiness initiative, acting as the primary technical advisor and subject matter expert on all aspects of cryptographic modernization.
Crypto Inventory Tool Deployment: Take ownership of the end-to-end implementation and configuration of crypto inventory tools within the infrastructure.
Crypto Asset Discovery: Utilize the deployed tools to conduct a discovery of all cryptographic assets, including algorithms, protocols, certificates, and keys, across the high-critical applications.
Source Code Analysis: Apply basic programming and Scripting skills to generate and interpret crypto inventories from the source code of bespoke, in-house applications where standard tools may not suffice.
Crypto Bill of Materials (CBOM) Development: Create and maintain a detailed and accurate Crypto Bill of Materials (CBOM) for applications identified as critical
Vulnerability and Risk Analysis: Analyze the CBOM to identify cryptograp
Reporting and Compliance: Prepare and submit comprehensive reports, detailing the findings from the CBOM and outlining the Customer's PQC readiness posture.
Stakeholder Collaboration: Work closely with application owners, development teams, and security personnel to ensure a collaborative and efficient engagement.
Qualifications and Skills
Cryptographic Expertise: A strong and demonstrable background in applied cryptography, including a understanding of symmetric and asymmetric encryption, digital signatures, hash functions, and key management principles.
Post-Quantum Cryptography (PQC) Knowledge: knowledge of PQC algorithms, the ongoing standardization efforts (eg, NIST PQC), and the practical challenges associated with migrating to quantum-resistant cryptography.
Solution Implementation Experience: Hands-on experience in deploying, configuring, and managing enterprise security solutions, specifically crypto inventory or code analysis tools.
Crypto Inventory and CBOM Experience: Experience with crypto discovery tools and the creation and management of a Crypto Bill of Materials (CBOM).
Programming and Scripting Skills: Understanding of one or more programming languages (eg, Python, Java, C#) with the ability to read source code, identify cryptographic functions, and write scripts to automate inventory generation.
Consulting and Communication: Excellent communication, presentation, and consulting skills, with the ability to articulate complex technical concepts to both technical and non-technical stakeholders.
Problem-Solving and Analytical Skills: A methodical and analytical approach to problem-solving, with a keen eye for detail.
Educational Background: A Bachelor's or Master's degree in Computer Science, Information Security, Mathematics, or a related field. Relevant certifications (eg, CISSP, CISM, or specialized cryptography certifications) are highly desirable.
Experience: 10-15 years of Experience in Data Security and Cryptography technologies