CTO - Security Architect

Job Description

Key Responsibilities

• Lead crypto discovery strategy across applications, infrastructure, cloud platforms, network protocols, certificates, keys and signing workflows.
• Define quantum-risk assessment method covering RSA, ECC, TLS, SSH, IPsec, code signing, PKI, HSM/KMS, data confidentiality and integrity exposure.
• Design crypto-agility target architecture, hybrid cryptography strategy and reference migration patterns.
• Review discovery findings and convert them into prioritized remediation roadmaps.
• Lead client technical workshops with security architecture, CISO, infrastructure, application and enterprise architecture teams.
• Guide pilot scope selection and validate whether migration designs are implementable and aligned to standards.
• Mentor consultants and engineering specialists on PQC, cryptographic risk and client delivery methods.

Required Skills

• Strong understanding of RSA, ECC, PKI, X.509, TLS/SSL, SSH, IPsec, digital signatures, certificate lifecycle, HSM and KMS concepts.
• Hands-on familiarity with security architecture, threat modeling, cloud security and enterprise cryptographic controls.
• Working knowledge of NIST PQC standards, ML-KEM/Kyber, ML-DSA/Dilithium, SLH-DSA/SPHINCS+ and hybrid migration patterns.
• Ability to create reference architectures, migration roadmaps, risk scoring models and executive-ready technical narratives.
• Strong stakeholder management and consulting communication skills

Preferred / Advantageous Skills

• Exposure to BFS security environments, regulated workloads, payment systems, identity platforms or high-value data protection programs.
• Experience with OpenSSL, liboqs, PQClean, Bouncy Castle, PKCS#11, cloud KMS/HSM platforms or cryptographic tooling.
• Familiarity with NIST, FIPS, ETSI, CNSA 2.0 and sector-specific regulatory expectations.

Expected Deliverables / Outputs

͏

Get Job Alerts

Join Us