Senior ICT Security Architect (m/f/d) - Post-Quantum Cryptography (PQC)

Project overview

For a long-term project with our client in Bern (with a remote component), we are looking for a Senior ICT Security Architect (m/f/d) – Post-Quantum Cryptography (PQC).

Further Framework Data

Type of engagement:

Utilization: 100%

Industry: Banking

Responsibilities

Mandatory Requirements

Optional Requirements

Let’s power the future together

From business case to implementation: As a leading consulting firm for strategic transformations, we are a trusted partner for our clients – and for our employees. Responsible, high-performing, and always with a focus on people. #WeAreWavestone

With our 360° portfolio of consulting services, we combine first-class industry expertise with a broad spectrum of cross-industry competencies, work interdisciplinarily, and think outside the box. We can thus offer our partner companies and freelancers comprehensive perspectives within our own projects and, as a long-standing framework agreement partner, support them in filling project vacancies – promptly and directly.

We look forward to hearing from you!

Your direct contact at Wavestone

Lejla Nametak

Phone: *

Email: *@*.eu

• Design and structure an enterprise-wide Cryptographic Inventory and record where RSA, ECC, DH, and other cryptographic methods are used in applications, infrastructure, networks, and products
• Evaluate and set up discovery methods and tools, and combine information from CMDB, code and network scans, certificate inventories, SBOM/CBOM, cloud data, and vendor information
• Analyze and document central technical cryptography use cases, including TLS/mTLS, PKI, code signing, document signatures, VPN, SSH, HSM/KMS, APIs, messaging, and data encryption
• Investigate the PQC readiness of libraries, operating systems, appliances, HSMs, cloud services, and vendor products, and specifically assess their support for ML-KEM and ML-DSA
• Develop pilot architectures, prototypes, and technical test implementations, for example for PQC or hybrid TLS, PKI and certificate lifecycle processes, and signature use cases
• Develop reusable patterns, guidelines, reference implementations, technical migration standards, and migration patterns so that application, platform, and infrastructure teams can consistently introduce PQC
• Identify and document technical dependencies and migration blockers, for example with regard to vendor roadmaps, protocol limits, performance, key and certificate sizes, HSM support, and legacy systems
• Several years of experience as a Security/Crypto Architect at a senior level (Senior, 5-8 years) in large IT environments
• Deep knowledge of PKI, TLS/mTLS, HSM/KMS, certificates, signatures, as well as network and API security
• Demonstrable experience in designing Crypto/Key Management architectures and in the technical analysis of infrastructure, application, and cloud use cases
• Ability to methodically and technically design an enterprise-wide Cryptographic Inventory and a PQC readiness assessment, and implement it together with various teams
• German language skills at C1 level and English language skills at C1 level
• Engagement period: 23.11.2026 – 29.02.2028
• Workload: 100%
• Location: Canton of Zurich; Remote component and on-site days per week to be clarified

Project details

• Start: flexible
• Remote: hybrid
• Location: Kanton Zürich, Schweiz, CH
• Languages: German