Enterprise Post-Quantum Cryptography Architect

Enterprise Post-Quantum Cryptography Architect

Houston, Texas | Hybrid | Ongoing Opportunity

iSphere is looking for an experienced Enterprise Post-Quantum Cryptography Architect to lead the development of an enterprise-wide quantum-readiness strategy for a Houston-based organization. This is a hybrid position, and candidates must currently live in the Houston area.

This is not a quantum computing research role. We need a senior security architect who understands how cryptography is used across a large enterprise and can create a practical plan for protecting sensitive systems and data as quantum-computing risks continue to develop.

The selected architect will assess the organization’s current cryptographic environment, identify exposure to “Harvest Now, Decrypt Later” risks, and build a multi-year roadmap for moving from RSA and ECC technologies to NIST-approved Post-Quantum Cryptography standards. This will include developing a Cryptographic Bill of Materials and evaluating PKI, certificates, HSMs, key management, IAM, VPNs, TLS, cloud platforms, applications, and data-protection technologies.

This person will also design a crypto-agile enterprise architecture that allows cryptographic algorithms and technologies to be replaced without requiring major system redesigns. The architect will work closely with infrastructure, cloud, networking, security, development, legal, procurement, vendors, and executive leadership to prioritize risks and guide enterprise-wide modernization efforts.

The role will include evaluating vendor readiness, leading proof-of-concept implementations, documenting architecture decisions, and presenting risks, recommendations, and migration strategies to senior leadership.

Candidates should have:

• 10 or more years of experience in enterprise security architecture, cybersecurity, or infrastructure architecture

• At least 5 years of hands-on experience with enterprise cryptography, PKI, digital certificates, certificate lifecycle management, key management systems, and Hardware Security Modules

• Strong experience with TLS, VPNs, Identity and Access Management, and enterprise security architecture

• Knowledge of NIST Post-Quantum Cryptography standards and crypto-agility principles

• Experience developing enterprise security roadmaps and leading large-scale technology transformations

• The ability to explain highly technical security risks and recommendations to executive and nontechnical audiences

Experience with NIST FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), FIPS 205 (SLH-DSA), or hybrid cryptographic implementations is strongly preferred. Cloud security experience with Azure, AWS, or Google Cloud Platform and experience working within financial services, healthcare, energy, government, defense, or critical infrastructure environments would also be valuable.

Certifications such as CISSP, ISSAP, CCSP, CISM, CRISC, SABSA, or TOGAF are preferred but not required.

The ideal candidate is a strategic security architect who combines deep enterprise cryptography expertise with the ability to turn emerging security threats into realistic business priorities, architecture decisions, and executable migration plans.