Post-Quantum Cryptography Security Engineer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Act as the technical Subject Matter Expert (SME) on information systems and infrastructure security.

• Develop and implement cryptographic security measures and policies.

• Oversee the engineering components of a Post-Quantum Cryptography (PQC) migration initiative.

• Provide guidance on emerging technologies and convert strategy into operational results.

• Upgrade cryptographic inventory from manual processes to fully automated systems utilizing discovery and inventory tools.

• Create and implement test plans for cryptographic tools, products, and services within controlled lab and pre-production settings.

• Record test outcomes and configuration settings based on observations.

• Evaluate quantum vulnerabilities and perform risk assessments.

• Assist in the transition to quantum-resistant encryption in accordance with NIST FIPS 203, 204, and 205.

• Work collaboratively with ISOs and ISSOs to implement security policies and ensure compliance with federal IT security standards.

• Investigate contemporary PQC standards, tools, and methodologies.

• Distill research findings into practical engineering recommendations.

• Contribute to significant deliverables across the entire program, including related areas.

• Engage in proactive communication within a fully remote, distributed team through written and asynchronous methods.

• Facilitate Agile ceremonies, coordinate sprints, engage stakeholders, and document meetings.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or 4+ additional years of relevant experience in place of a degree.

• Over 5 years of experience in information security engineering, specifically in network security, cryptographic systems, and risk management.

• (ISC)2 Certified Information Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.

• Demonstrated capability to analyze complex requirements and convert them into clear, actionable tasks and processes.

• Experience in implementing security controls and policies within enterprise IT environments.

• Practical experience with security tools and automation techniques.

• Acquainted with NIST cryptographic standards, PKI, TLS, and Zero Trust Architecture (ZTA) frameworks.

• Expertise in network security architecture and risk assessment within complex federal or enterprise environments.

• Understanding of cryptographic principles and standards, including PKI and TLS.

• Awareness of the effects of quantum computing on existing encryption methods.

• Familiarity with PQC frameworks and NIST standardization efforts.

• Ability to independently investigate a rapidly evolving technical area and turn findings into actionable recommendations.

• U.S. citizenship is required to meet federal contract compliance.

• Previous experience with federal agency IT programs and familiarity with federal governance structures, compliance frameworks, and inter-agency coordination.

• Practical experience with PQC concepts or NIST PQC algorithms (FIPS 203, 204, 205).

• Knowledge of automated cryptographic discovery and inventory tools, DevSecOps pipelines, or FedRAMP environments.

🏝️ Benefits

• 144 hours of Paid Time Off (PTO).

• 11 holidays per year.

• 85% coverage of insurance premiums.

• Healthcare coverage through major carriers.

• 401(k) retirement plan.

• Opportunities for continuing education.

• Certification maintenance and reimbursement support.

• Career development opportunities available.

• Fully remote work environment.