PQC-Ready TLS Security Contractor

Role: PQC-Ready TLS Security Contractor
Location: Plano, TX / Tampa, FL / Columbus, OH (Candidates open to relocation are welcome to apply)
Duration: Long-Term Contract

Role Summary
Client is seeking a hands-on TLS Security Consultant with strong expertise in TLS 1.2, TLS 1.3, SSL/TLS security, cipher suite analysis, TLS modernization, and network traffic analysis using Wireshark. The consultant will work closely with engineering, security, infrastructure, and application teams to support the organization's TLS modernization journey and drive adoption of TLS 1.3 standards.

Required Skills
Strong understanding of TLS 1.2 and TLS 1.3, including handshake protocols, session resumption, and downgrade prevention mechanisms.
Deep knowledge of TLS negotiation, cipher suites, cryptographic algorithms, PFS, AEAD vs CBC, RSA vs (EC)DHE, and certificate-based authentication.
Experience assessing and modernizing enterprise TLS implementations.
Hands-on experience with Wireshark for packet analysis and TLS troubleshooting.
Ability to analyze handshake failures, cipher negotiation issues, and protocol-version compatibility challenges.
Strong communication skills and the ability to work with cross-functional technical teams.
Experience creating TLS standards, governance processes, migration plans, and operational runbooks.

Preferred Skills
Mainframe security and infrastructure experience (highly desirable, not mandatory).
Experience with mTLS implementations and certificate lifecycle management.
Familiarity with enterprise-scale TLS hardening initiatives.

Key Responsibilities
Explain and document TLS negotiation processes across TLS versions.
Assess existing TLS environments and recommend secure cryptographic baselines.
Inventory TLS endpoints, dependencies, and communication flows.
Lead TLS 1.3 migration initiatives and modernization efforts.
Partner with application, platform, network, and security teams to resolve TLS-related challenges.
Develop monitoring, reporting, and governance standards.
Support deployment activities and TLS-related incident investigations.