Hsm & Key Management Cybersecurity Jobs

1 job found

Today

Associate Director Cybersecurity Architecture - Quantum Security

Deloitte Mechanicsburg, PA

Mechanicsburg, PA

Today

$137k - $282k/yr Full time Crypto Bom Cryptographic Agility Cryptography

Apply Now

Job Description

Lead Deloitte’s enterprise quantum-security architecture and PQC migration planning for regulated, business-critical environments.

Responsibilities

Define and execute the enterprise quantum-security strategy and a multi-year PQC migration roadmap aligned to business objectives, regulatory requirements, and enterprise risk appetite.
Advise executive leadership on quantum risk, regulatory drivers, investment needs, and migration progress through senior-leader briefings and governance forums.
Own enterprise cryptographic discovery and inventory across applications, infrastructure, networks, PKI, IoT/OT, cloud, and vendor-managed systems, and establish crypto-bill-of-materials (CBOM) practices.
Prioritize remediation by data sensitivity, data shelf life, and exposure to harvest-now-decrypt-later attacks; oversee remediation planning and execution.
Direct design and implementation of NIST-standardized PQC algorithms and hybrid approaches across TLS, VPN, code signing, PKI and certificate management, HSMs, key management, and firmware signing.
Co-sponsor proof-of-concept testing, performance benchmarking, and interoperability validation; drive cryptographic agility to support algorithm replacement with minimal re-engineering.
Ensure program alignment with NIST guidance including FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, and NCCoE publications, plus NSA CNSA 2.0 timelines and applicable federal directives and FIPS 140-3 validated module requirements.
Establish and lead cryptographic governance including policies, standards, and risk-based decision frameworks; embed quantum-risk considerations into enterprise risk, third-party risk, procurement, and architecture review processes.
Act as a liaison to major technology vendors, cloud providers, and HSM and PKI vendors; evaluate vendor roadmaps and hold suppliers accountable for PQC readiness in contracts.
Represent Deloitte in industry working groups and standards forums, including NIST NCCoE, PQC Alliance, and sector ISACs; engage clients and regulators as a thought leader.
Manage the program budget, resourcing, and delivery milestones to support risk reduction, regulatory compliance, and business priorities.
Lead and develop a team of cryptography, PKI, and security architecture professionals; build organizational quantum-security competency through training, reference architectures, and playbooks.

Requirements

Ability to work independently and collaborate as part of a team.
Effective written and verbal communication skills.
Meticulous attention to detail and quality of work product.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
Strong interpersonal skills and professional demeanor.
Ability to meet deadlines.
Ability to mentor and provide clear guidance to others.
Bachelor’s degree (or equivalent) in Information Technology, Computer Science, or Engineering.
Minimum 10 years of experience in cybersecurity, including experience defining and executing enterprise security or cryptographic strategies aligned to business objectives, regulatory requirements, and risk appetite.
Minimum 4 years supporting highly regulated environments (federal, defense, audit and financial services, or critical infrastructure).
Minimum 2 years of people and/or process management experience.
Ability to travel 10% on average.
Must be legally authorized to work in the United States without employer sponsorship.

Preferred

Advanced degree (master’s or higher) in Information Security, Computer Science, Mathematics, Engineering, or related field.
Strong working knowledge of post-quantum cryptography and migration challenges (key and signature sizes, performance, hybrid modes).
Deep knowledge of standards and guidance, including NIST FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, and NCCoE migration publications.
Deep knowledge of NSA CNSA 2.0, NSM-10, and OMB M-23-02.
Deep understanding of FIPS 140-3 / CMVP, Zero Trust architecture, and federal mandates.
Deep understanding of PKI, TLS, key management, HSMs, and secure software and firmware signing.
Experience leading an enterprise cryptographic inventory or large-scale crypto-migration program.
Proven ability to influence senior stakeholders and drive enterprise-wide change in matrixed environments; translate technical risk into business terms.
Experience engaging vendors, industry consortia, and standards bodies; record of speaking, publishing, or standards participation preferred.
Industry certifications such as CISSP, CISM, CCSP, CISA, GIAC, or equivalent experience.

Technologies

ML-KEM, ML-DSA, SLH-DSA
TLS, VPN
PKI, IoT/OT, CBOM (crypto-bill-of-materials), HSMs
NIST FIPS 203, NIST FIPS 204, NIST FIPS 205
FN-DSA, NIST IR 8547, SP 800-208
NSA CNSA 2.0, FIPS 140-3, NCCoE
Zero Trust architecture, CMVP, NSM-10, OMB M-23-02
PKI and certificate management, code signing, key management, firmware signing

Location

Mechanicsburg, PA (onsite)

Compensation

USD 137,400 - 282,100 per yearly
Eligible for a discretionary annual incentive program (subject to rules)

View full job page →

Get Hsm & Key Management Cybersecurity Jobs alerts

New Hsm & Key Management Cybersecurity Jobs, daily.