Cybersecurity Architect, Post-Quantum Cryptography (PQC)
About The Position
The Cybersecurity Architect, Post-Quantum Cryptography (PQC), is an individual-contributor Subject Matter Expert within Citi’s Cryptographic Security Center of Excellence, reporting to the Senior Cryptography Expert. The role supports Citi’s Quantum Readiness Program and the industry transition to post-quantum cryptography, helping protect Citi’s data from cryptographically relevant quantum-computing threats. It works across all lines of business, applications, and geographies, and engages with internal stakeholders, vendors, external industry bodies, and regulators. The position provides advice and counsel on cryptographic technology and operations, delivers complex cryptographic reviews and structured migration or mitigation plans, and coordinates with application owners and the Cryptographic Security Center of Excellence. It contributes to a risk-based, data-driven governance strategy and roadmap, advances cryptographic inventory and reporting, and helps embed PQC and crypto-agility requirements into technology roadmaps, refreshes, and modernization efforts. The role also assesses vendor readiness, supports product adoption decisions, and communicates program status and emerging developments to leadership and other audiences.
Requirements
- At least 6 years of experience in cybersecurity, cryptography, or a control-related function at enterprise organizations, with knowledge of or prior consulting support for post-quantum migration strategies and timelines.
- Ability to architect PQC deployments within existing infrastructure use cases such as PKI, ATMs, and payments, and across hardware components such as HSMs, load balancers, network devices, and embedded endpoints.
- Experience with third-party or vendor tools and applications regarding cryptographic support and upgrade pathways.
- Working knowledge of public key infrastructure, application and data security, symmetric encryption systems, and their implementation.
- Expert diplomacy skills and ability to guide, influence, and convince colleagues across a global organization, engaging technical and non-technical stakeholders.
- Strong understanding of operating systems and network security infrastructure, and proficiency in one or more scripting languages such as Python or Bash.
- Strong understanding of AI capabilities and utilization, including ability to leverage Citi’s generative AI tools to accelerate deliverables.
- Solid understanding of cryptography, algorithms, and implementations, with willingness to maintain and enhance knowledge through research, self-study, and engagement.
- Solid understanding of technologies that use and implement cryptography, including software, networking, identity systems, and data platforms.
- Experience with public cloud technologies and their use of cryptography and key management.
- Bachelor’s degree in Computer Science or equivalent relevant experience.
Nice To Haves
- Prior enterprise systems implementation or migration experience and strategy development experience.
- Master’s degree preferred.
Responsibilities
- Serve as a Subject Matter Expert on traditional and post-quantum cryptographic algorithms, practices, and use cases.
- Support Citi’s Quantum Readiness Program to protect Citi data from cryptographically relevant quantum-computing threats.
- Co-own the PQC readiness view of the cryptographic inventory and reconcile inventory-tool outputs with discovery-tool outputs to reduce or eliminate manual enrichment for PQC reporting.
- Provide support and effective challenge to business and technology representatives and leadership regarding secure cryptography implementation.
- Assess practical cryptography and the impacts and considerations of migration to post-quantum use cases.
- Deliver professional presentations on emerging cryptography trends and key topics, tailoring business-impact messaging to different levels of expertise and leadership.
- Help develop and communicate a risk-based, data-driven governance strategy and roadmap for the Quantum Readiness Program with architecture, engineering, operations, information security officers, and other stakeholders.
- Provide technical expertise in symmetric and asymmetric encryption, digital signatures, hashing, Distributed Ledger Technology, and related key and certificate management.
- Identify tools needed for cryptography, key, and certificate governance; lead proofs of concept and oversee implementations as needed.
- Work with application, infrastructure, architecture, and engineering teams to translate system and business requirements into implementation requirements and embed PQC and crypto-agility requirements into roadmaps, technology refreshes, and modernization efforts.
- Build internal relationships and help drive program-level timelines and requirements across the global enterprise.
- Participate in new-product and vendor assessments and develop proofs of concept and trials to support deployment and adoption decisions.
- Partner with Third-Party Risk Management and Supplier teams to assess vendor PQC roadmaps and ensure PQC requirements are incorporated into contracts and renewals.
- Establish reporting and metrics, including KPIs and KRIs, for governance, senior leadership, internal audit, and regulatory reporting.
- Monitor NIST, IETF, CNSA, regulatory, and industry developments and assess their impact on internal guidance and program timelines.
- Respond to internal, external, and regulatory requests regarding program readiness and alignment.
Benefits
- Medical coverage
- Dental coverage
- Vision coverage
- 401(k)
- Life insurance
- Accident insurance
- Disability insurance
- Wellness programs
- Paid time off, including vacation and sick leave
- Paid holidays
- Discretionary and formulaic incentive and retention awards may be available to eligible employees
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
