Cryptography Architect – Crypto & Post-Quantum

Cryptography Architect – Crypto & Post-Quantum
6-month contract
September Start date
Outside IR35 - Market rate
Remote Working 

We are seeking an experienced Crypto & PQC Architect to lead a critical post-quantum cryptography readiness programme. This hands-on role will focus on deploying cryptographic inventory tools, discovering cryptographic assets and developing a comprehensive Crypto Bill of Materials (CBOM) across business-critical applications.

This is a hands-on architecture role focused on assessing the organisation’s existing cryptographic landscape and establishing a clear roadmap towards quantum-resistant security. The initial priority will be to deploy crypto-inventory tooling and develop a comprehensive Crypto Bill of Materials (CBOM) across business-critical applications.
The role will involve working closely with application owners, security teams and developers to identify where cryptography is used, assess associated risks and recommend appropriate remediation and migration strategies.

Key responsibilities:

• Lead the technical delivery of the PQC-readiness programme.
• Act as the subject-matter expert for cryptography, crypto-agility and quantum-resistant security.
• Deploy, configure and manage cryptographic inventory and code-analysis tools.
• Discover and document cryptographic algorithms, protocols, certificates, libraries and keys.
• Develop and maintain detailed CBOMs for critical applications and platforms.
• Review bespoke application source code where automated discovery tools are insufficient.
• Use scripting to automate crypto discovery and inventory generation.
• Assess current cryptographic implementations against emerging PQC standards.
• Identify vulnerable, deprecated and non-PQC-compliant algorithms and dependencies.
• Produce risk assessments, technical findings and remediation recommendations.
• Support the development of a practical roadmap for migration to quantum-resistant cryptography.
• Present findings clearly to both technical and non-technical stakeholders.

Essential experience:

• Extensive experience in data security, cryptography or security architecture.
• Strong knowledge of symmetric and asymmetric encryption, digital signatures, hashing, certificates and key management.
• Good understanding of PQC algorithms, crypto-agility and NIST standardisation.
• Previous experience with cryptographic discovery tools and CBOM creation.
• Hands-on experience deploying enterprise security or source-code analysis solutions.
• Ability to review source code and script using Python, Java or C#.
• Strong consulting, stakeholder management and communication skills.

Relevant security certifications such as CISSP, CISM or specialist cryptography qualifications would be advantageous.