ICT Architect

Project overview

For deployment with our client in Zurich, we are looking for an ICT Architect.

The project goal is to create a sound technical basis for the introduction of Post-Quantum Cryptography (PQC) by making the current crypto landscape (PKI, TLS, HSM/KMS, signatures, etc.) transparent and evaluating it for PQC capability. Based on this, viable migration strategies and reference patterns for applications, platforms, and infrastructure are to be developed.

The PQC Security Architect is responsible for the conception of the Cryptographic Inventory, the evaluation of discovery methods and tools, the analysis of central cryptography use cases, and the assessment of the PQC readiness of components and products. He or she will develop pilot architectures and technical migration patterns, identify dependencies and blockers, and thus create the basis for a structured, low-risk PQC migration.

Responsibilities

Conceive and structure Cryptographic Inventory:

Evaluate and set up discovery methodology and tooling:

Analyze and document technical use cases:

Assess PQC Readiness:

Build pilot architectures and prototypes:

Develop technical migration patterns and standards:

Identify technical dependencies and blockers:

• Identification of where RSA, ECC, DH, etc. are used in applications, infrastructure, networks, and products.
• Use and combination of CMDB, Code Scanning, Network Scanning, SBOM/CBOM certificate inventories, cloud and vendor data.
• incl. TLS/mTLS, PKI, Code Signing, Document Signatures, VPN, SSH, HSM/KMS, APIs, Messaging, Data Encryption
• Examination of libraries, operating systems, appliances, HSMs, cloud services, and vendor products regarding support for ML-KEM, ML-DSA, etc.
• e.g., PQC/Hybrid TLS, PKI/Certificate Lifecycle prototypes, or signature use cases for validation in test/pilot environments.
• Reusable patterns, guidelines, and reference implementations for application teams to implement PQC consistently, not individually.
• e.g., vendor roadmaps, protocol limitations, performance aspects, key/certificate sizes, HSM support, legacy systems.

Requirements

• Must: Several years of experience as a Security/Crypto Architect in large IT environments with deep expertise in PKI, TLS/mTLS, HSM/KMS, certificates, signatures, and network/API security.
• Must: Demonstrable experience in designing crypto/key management architectures and in the technical analysis of infrastructure, application, and cloud use cases.
• Must: Ability to methodically and technically conceive a company-wide Cryptographic Inventory and PQC readiness assessment and implement it with various teams.
• Can: Practical experience with Post-Quantum Cryptography (PQC), hybrid TLS/PKI pilots, or PQC evaluations in regulated industries (e.g., financial industry).
• No subcontracting allowed!

Project details

November 23, 2026

End: February 29, 2028

100%

Zurich and remote (only within Switzerland).

Find out about your opportunities with Mr. Patrick Casutt or send us your CV directly by email to *@*.com. We look forward to hearing from you.

We refer to our data protection regulations (see www.profilogic.com).

• Start: 2026-11
• Duration: 15 Monate
• Remote: hybrid
• Location: Zürich, Schweiz, CH
• Languages: German