Post-Quantum Cryptography (PQC) Engineer

Post-Quantum Cryptography (PQC) Engineer

Role Overview
The PQC Engineer will perform cryptographic asset discovery, quantum risk assessments, and readiness planning to transition NIH systems toward quantum-safe cryptography.

Responsibilities

• Conduct automated and manual discovery of cryptographic assets across NIH hybrid cloud and on-premises systems.
• Build and maintain a centralized cryptographic inventory ( 95% coverage), documenting algorithms, key lengths, expirations, and system mappings.
• Assess assets for quantum vulnerability and classify them by risk category (High/Medium/Low).
• Develop a PQC Transition Readiness Assessment, including prioritization of pilot candidate systems.
• Deliver a PQC inventory schema (JSON/XML) for integration into NIH s CMDB (ServiceNow).
• Collaborate with NIH stakeholders to align PQC adoption with NIST guidance.

Qualifications

• BS in Computer Science, Mathematics, or related field.
• 5+ years experience with cryptographic engineering, PKI, TLS, and encryption technologies.
• Familiarity with NIST PQC standards and CRQC threat models.
• Strong knowledge of RSA, ECC, Diffie-Hellman, and symmetric encryption algorithms.
• Experience with cryptographic discovery tools and inventory management.
• Certifications preferred: CISSP, CEH, Security+.