Key Responsibilities

Strategy and Migration Approach: Develop strategies and migration plans for integrating Certificate Authorities (CAs) into an Enterprise Public Key Infrastructure (PKI).
Post-Quantum Strategy: Drive research, develop transition roadmaps, and establish crypto-agility frameworks to safeguard systems against future quantum computing threats through the adoption of post-quantum cryptographic algorithms.
Key Management Architecture: Oversee the complete lifecycle of encryption keys, including generation, distribution, rotation, escrow, and secure destruction, as well as integration with Hardware Security Modules (HSMs) and Key Management Systems (KMS).
Security and Protocol Reviews: Assess cryptographic implementations, API architectures, Public Key Infrastructure (PKI), and Transport Layer Security (TLS) protocols to identify weak algorithms, vulnerabilities, and insecure practices.
Threat Modelling and Risk Assessment: Conduct technical risk assessments and threat modelling across cloud-native applications, microservices, and hybrid infrastructure environments.
Standardisation and Governance: Establish enterprise-wide cryptographic standards, produce high- and low-level technical design documentation (HLD/LLD), and ensure alignment with relevant regulatory and security standards, including FIPS, Common Criteria, and NIST.

Qualifications and Requirements

Education: Bachelor’s or Master’s degree in Computer Science, Mathematics, Electrical Engineering, or a related technical discipline.
Core Technical Knowledge: Strong understanding of symmetric and asymmetric cryptography, digital signatures, hash functions, Multi-Party Computation (MPC), and Zero Trust security principles.
Experience: Typically 5-12+ years of practical experience in security engineering, cryptographic research, or enterprise IT architecture.
Certifications: Professional qualifications such as CISSP, CISM, or other relevant specialist security certifications are desirable.

Cryptography Architect – Contract

Related Jobs