Cryptographic Architect (Solution Architect)

Project overview

This contract role focuses on enterprise cryptographic and security architecture, including migrations of certificate authorities into an Enterprise PKI and the development of post-quantum and crypto-agility strategies. The key requirements are strong cryptographic fundamentals, PKI and CA migration knowledge, key-management architecture with HSMs or KMS, security and protocol reviews, threat modelling, and cryptographic standards governance. A relevant technical degree and typically 5–12+ years of experience are specified; CISSP, CISM, or specialized security certifications are preferred.

The role is based in Dublin, and the structured input specifies a contract; the work mode is not stated. The description says “typically 5 to 12+ years,” while the structured experience range is 5–12 years.

Responsibilities

• Strategy and migration approach for migrations of Certificate authorities into an Enterprise PKI.
• Post-Quantum Strategy: Lead research, transition roadmaps, and crypto-agility frameworks to protect systems against future quantum computing threats using post-quantum algorithms.
• Key Management Architecture: Own the full lifecycle of encryption keys—including generation, distribution, rotation, escrow, destruction, and integration with Hardware Security Modules (HSMs) or Key Management Systems (KMS).
• Security & Protocol Reviews: Evaluate cryptographic implementations, API designs, Public Key Infrastructure (PKI), and transport layer security to spot weak algorithms or improper handling.
• Threat Modelling & Risk Assessment: Perform technical risk analysis and threat modelling for cloud-native applications, microservices, and hybrid infrastructure.
• Standardization & Governance: Define corporate cryptographic standards, author technical design documents (HLD/LLD), and ensure compliance with regulatory standards (e.g., FIPS, Common Criteria, NIST).

Requirements

• Deep understanding of symmetric and asymmetric cryptography, digital signatures, and hash functions
• Public Key Infrastructure (PKI) and certificate authority (CA) migration strategy
• Post-quantum cryptography strategy, transition roadmaps, and crypto-agility frameworks
• Encryption key lifecycle management and integration with HSMs or KMS
• Cryptographic implementation, API, PKI, and TLS security reviews
• Threat modelling and technical risk assessment for cloud-native, microservices, and hybrid infrastructure
• Cryptographic standards, governance, and technical design documentation, including HLD/LLD
• Multi-party computation (MPC) and zero-trust principles
• Bachelor's or Master's degree in computer science, mathematics, electrical engineering, or a related technical field
• Typically 5–12+ years of hands-on experience in security engineering, cryptologic research, or enterprise IT architecture

Project details

• Start: flexible
• Remote: hybrid
• Location: Ireland, IE