Senior Resident Engineer, Post-Quantum Cryptography (KeyFactor AgileSec) - Hybrid

Position: Senior Resident Engineer, Post-Quantum Cryptography (KeyFactor AgileSec)
Location: US locations, 3 days onsite
Role Overview
The Senior Resident Engineer will support a leading financial services client's post-quantum cryptography (PQC) inventory assessment and migration readiness program, delivered on KeyFactor's AgileSec platform. This role supports a broad ecosystem that may include KeyFactor AgileSec, enterprise PKI, certificate lifecycle management, HSM-backed key management, and related cryptographic discovery, inventory, and remediation tooling.

The successful candidate will partner with the client's security architecture, compliance, risk, and engineering teams, as well as implementation and product teams, to build and operationalize a comprehensive cryptographic inventory and PQC migration roadmap.

Key Responsibilities
Serve as the embedded, onsite technical resource for the client's PQC inventory assessment, working side-by-side with the implementation team from the earliest stages of deployment. Build and retain institutional knowledge of the client's cryptographic environment, architecture, and integration points as the AgileSec platform is implemented and configured. Support cryptographic asset discovery and inventory activities across applications, certificates, keys, and algorithms to identify PQC migration risk and prioritize remediation.

Investigate and document architectural and behavioral differences between AgileSec platform versions (e.g., prior proof-of-concept version vs. current release) that affect use case implementation and scoping. Partner with security architecture, compliance, risk, and engineering stakeholders to translate discovery findings into clear technical requirements and migration plans. Support integration of AgileSec with existing PKI, HSM, and certificate lifecycle management infrastructure.

Develop and maintain technical documentation, runbooks, architecture materials, and knowledge transfer content to support long-term, in-house ownership of the environment. Serve as a growing point of contact for platform questions and troubleshooting as the engagement matures toward steady-state operations.

Required Skills
Bachelor's degree in Computer Science, Engineering, Information Security, or a related field or equivalent practical experience.
5+ years of experience in security engineering, cryptography, PKI, or related infrastructure roles, ideally within financial services or another highly regulated industry. Strong foundational knowledge of cryptography, including symmetric/asymmetric encryption, digital certificates, and key management concepts.

Familiarity with, or strong aptitude to quickly learn, post-quantum cryptography concepts and NIST-standardized algorithms (e.g., ML-KEM, ML-DSA). Hands-on experience with PKI, certificate lifecycle management, and HSM-backed key management (e.g., Azure Key Vault, Azure Managed HSM, AWS KMS, AWS CloudHSM, or similar). Experience with cryptographic inventory, discovery, or crypto-agility initiatives is a strong plus. Direct experience with KeyFactor AgileSec, EJBCA, or KeyFactor Command is a significant plus but not required for the right candidate.

Working knowledge of enterprise identity and access management patterns, including SSO, OAuth, OIDC, and SAML. Experience with scripting or development languages such as Python, PowerShell, Java, or similar technologies.