Description:
We are seeking a Consultant specializing in cryptography and post-quantum readiness to support the delivery of client engagements focused on cryptographic risk, encryption modernization, key lifecycle management, and quantum-resilient architecture.
This role executes hands-on delivery work under the direction of Lead and Principal Consultants, including cryptographic discovery and inventory, assessment analysis, documentation, and remediation support. The Consultant works directly with client technical teams while developing the deep cryptographic and consulting skills that lead to advancement toward Lead Consultant.
The ideal candidate has a solid cybersecurity foundation, working knowledge of cryptographic fundamentals such as PKI, key management, and encryption protocols, strong analytical and documentation skills, and a demonstrated appetite to build deep expertise in post-quantum cryptography.
Key Responsibilities
Client Delivery & Engagement Support
- Support delivery of cryptographic maturity evaluations, PQC readiness assessments, and key management capability reviews under the direction of Lead and Principal Consultants
- Conduct interviews, workshops, and data gathering sessions with client technical teams
- Contribute analysis, findings, and documentation to cryptographic roadmaps and remediation plans
- Prepare and present workstream-level findings to client technical stakeholders
Cryptographic Discovery & Inventory
- Execute enterprise cryptographic asset discovery across algorithms, certificates, keys, protocols, and encryption dependencies using scanning tools and manual analysis
- Document and analyze “harvest now, decrypt later” exposure based on data sensitivity and shelf life
- Gather and document third-party and supply chain cryptographic dependencies including SaaS providers, payment processors, certificate authorities, and embedded systems
- Build and maintain cryptographic inventories that support migration planning and risk quantification
Key Management, PKI & Encryption Analysis
- Assess key management lifecycle practices (generation, distribution, rotation, revocation, escrow, and destruction) against leading practice
- Analyze PKI environments including CA hierarchies, certificate lifecycle management, and automated enrollment protocols (ACME, SCEP, EST)
- Review encryption controls across data states (at-rest, in-transit, in-use), including TLS configurations and cipher suite hygiene
Migration & Remediation Support
- Support development of risk-based PQC migration plans and prioritization models that account for data longevity versus quantum timeline estimates
- Research NIST-selected PQC algorithms, hybrid key exchange approaches (e.g., ML-KEM combined with classical ECDH), and vendor PQC roadmaps
- Contribute to policies, standards, and crypto baseline documentation
- Track remediation progress and maintain engagement artifacts and working papers
Risk, Compliance & Standards Alignment
- Map findings to NIST guidance, cryptographic controls, and regulatory expectations
- Support documentation of cryptographic risk in business and regulatory terms
Professional Development & Team Contribution
- Build expertise in cryptography, key management, PKI, and post-quantum readiness through engagement work, training, and certifications
- Contribute to practice assets such as templates, accelerators, and research summaries
- Support whitepapers, client workshops, and internal enablement sessions
- Actively seek and apply feedback and mentorship from Lead and Principal Consultants
,
Required Qualifications
- 5+ years in cybersecurity, IT infrastructure, or related technical roles
- Working knowledge of cryptographic fundamentals, including symmetric and asymmetric encryption, hashing, digital signatures, and TLS
- Familiarity with PKI concepts, including certificates, certificate authorities, and certificate lifecycle management
- Exposure to one or more of: key management, HSMs, cloud KMS platforms, secrets management, or network/identity security
- Strong analytical, documentation, and written and verbal communication skills
- Bachelor's degree in computer science, cybersecurity, engineering, or equivalent practical experience