job summary:
We are seeking a Senior Cryptography Architect to support our client in defining and executing its enterprise Post-Quantum Cryptography (PQC) strategy. This role will focus on assessing cryptographic risk exposure, establishing a comprehensive asset inventory, and developing a risk-based, phased roadmap toward PQC readiness aligned to emerging NIST PQC standards and financial regulatory expectations.
The contractor will play a critical role in building the crypto-agility capability and enabling a structured transition from classical cryptography (RSA/ECC) to hybrid and post-quantum models over a multi-year roadmap.
location: Telecommute
job type: Contract
salary: $70 - 80 per hour
work hours: 9am to 5pm
education: Bachelors
responsibilities:
Key Responsibilities
Assess enterprise cryptographic risk exposure related to quantum threats and strategies define mitigation strategies.
Develop and maintain a cryptographic inventory framework covering algorithms, key management systems, certificates, protocols, dependencies, and vendor-provided cryptography.
Work with tools and platforms for cryptographic discovery and risk-analysis solutions.
Lead the development of PQC transition strategies, including risk-based prioritization, hybrid cryptographic design patterns, and phased migration roadmaps aligned to business critically.
Define enterprise architecture patterns for hybrid cryptography (classical & PQC) in TLS, PKI, key exchange, and data protection use cases Assist in the creation and maintenance of cryptographic asset inventories (algorithms, keys, certificates, protocols, dependencies).
Evaluate third-party vendor PQC readiness, cryptographic dependencies, and contractual impacts within CNA's ecosystem.
Translate complex cryptographic and quantum concepts into clear, business-relevant insights for senior stakeholders.
Stay current on developments in NIST PQC standards, cryptographic best practices, and regulatory expectations relevant to financial institutions.
Collaborate with broader security, enterprise architecture, and risk teams within client organizations.
qualifications:
Experience leading or supporting enterprise cryptographic modernization crypto-agility, or encryption transformation initiatives within large enterprises.
Solid foundational knowledge of cryptography, including symmetric/asymmetric encryption, hashing, key management, PKI, TLS, and certificates.
Understanding of how cryptography is implemented in enterprise and insurance environments (applications, networks, cloud, data protection).
Background in cybersecurity, security architecture, or technology risk (consulting or in-house).
Working knowledge of post-quantum cryptography (PQC) concepts and NIST standardization efforts; practical implementation experience preferred but not required.
Ability to learn quickly and independently in new and emerging technical domains.
Strong analytical thinking and structured problem-solving skills.
Clear written and verbal communication skills, with the ability to explain technical topics to non-technical audiences.
Desired / Nice to Have
Familiarity with cryptographic discovery, certificate management, or crypto-agility tooling.
Familiarity with financial regulatory guidance impacting cryptographic controls.
Knowledge of security frameworks or standards (e.g., NIST, ISO 27001, MAS, RMiT, PCI DSS).
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
![]()
