P1C3TSTSArchitect PQC Solutions: Design and implement quantum-resistant cryptographic architectures across cloud platforms, enterprise infrastructure, hardware security modules (HSMs), and data-at-rest/in-transit frameworks.
Lead Migration Strategy: Develop, refine, and execute a comprehensive cryptographic inventory and migration blueprint based on the NIST PQC standards (e.g., ML-KEM, ML-DSA, FN-DSA, XMSS/LMS).
Implement Crypto-Agility: Build and embed crypto-agile frameworks into software development lifecycles (SDLC) and network protocols to allow seamless algorithmic swapping without system downtime.Conduct Risk Assessments: Assess current infrastructure vulnerabilities against "Store Now, Decrypt Later" (SNDL) attacks and perform deep-dive threat modeling on third-party integrations and internal code.
Collaborate Cross-Functionally: Partner with Product, DevOps, Hardware, and Enterprise Infrastructure teams to guide the integration of quantum-safe Public Key Infrastructures (PKI) and hybrid cryptographic protocols.
Drive Standards & Compliance: Monitor global regulatory updates (such as CNSA 2.0 timelines or regional compliance standards) to ensure internal roadmaps meet or exceed impending legal mandates.Deep Cryptographic Expertise: Strong foundational knowledge of advanced cryptography, including asymmetric/symmetric key schemes, PKI, digital signatures, and mathematical foundations of PQC (e.g., lattice-based, code-based, or multivariate cryptography).
Architecture Experience: Proven track record designing enterprise-grade security architectures, securing network protocols (TLS, SSH, IPSec), and configuring modern HSMs, KMS, and IAM systems.
Software Proficiency: Hands-on experience developing or integrating cryptographic libraries (e.g., OpenQuantumSafe, BouncyCastle, OpenSSL) using languages like C/C++, Rust, Go, or Python.
Industry Standards Knowledge: Strong familiarity with the NIST PQC standardization process, IETF draft specifications, and migration guidelines from bodies like CISA, NSA, or ENISA.Education & Background:
Active participation in cryptographic research communities, standardization bodies, or open-source PQC projects.
Relevant industry certifications (e.g., CISSP, ISSAP).
