Lead Information Systems Security Officer (ISSO) - Post-Quantum Cryptography

Lumen Technologies • Remote, OR

5d • $105,786 - $155,152 • Remote

About The Position

Lumen is seeking a Lead Information Security Engineer (ISSO) with expertise in Risk Management Framework (RMF) execution and a focus on Post-Quantum Cryptography (PQC) strategy, compliance, and implementation. The role serves as the primary security authority for assigned systems, owning RMF execution and supporting successful Authorization to Operate (ATO) outcomes while preparing customer cryptographic environments for emerging quantum threats.

The technical leader will integrate quantum-resilient security principles into system authorizations, architectures, and operations. Working with engineering, product, program, and customer stakeholders, the ISSO evaluates cryptographic risk and emerging standards, supports cryptographic modernization, and ensures compliance in federal and highly regulated environments. This is a remote position open to candidates anywhere in the United States. U.S. citizenship and the ability to meet suitability requirements for a GSA public trust position are required.

Requirements

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Engineering, or a related field, or an equivalent combination of education and experience.
• At least 5 years of cybersecurity, information assurance, governance, risk, and compliance experience, including direct responsibility for RMF execution and ATO support.
• Strong working knowledge of NIST RMF (SP 800-37), NIST SP 800-53, and federal authorization frameworks including FedRAMP and FISMA.
• Experience evaluating cryptographic implementations, PKI, key management systems, digital certificates, and encryption technologies.
• Knowledge of PQC concepts, quantum threats to traditional cryptography, crypto-agility principles, and emerging quantum-resistant algorithms.
• Demonstrated experience supporting PQC readiness assessments, cryptographic inventories, migration planning, or cryptographic modernization initiatives.
• Knowledge of NIST PQC standardization efforts, quantum-resistant algorithms, and emerging federal guidance related to quantum security preparedness.
• Experience conducting security risk assessments and translating regulatory and technical requirements into actionable security guidance.
• Experience developing and maintaining authorization artifacts, including SSPs, POA&Ms, security assessments, and continuous monitoring documentation.
• Strong written and verbal communication skills, with the ability to explain complex security and cryptographic concepts to technical and non-technical audiences.
• U.S. citizenship required.
• Ability to meet suitability requirements for a GSA public trust position required.

Nice To Haves

• Experience supporting federal government, Department of Defense, Intelligence Community, or other highly regulated organizations.
• Experience assessing cryptographic risks in cloud, hybrid, telecommunications, SaaS, or large-scale enterprise environments.
• Experience with security architecture reviews, cryptographic design reviews, and evaluation of vendor PQC capabilities and roadmaps.
• Professional certifications such as CISSP, CCSP, CGRC, CISA, Security+, or equivalent industry-recognized credentials.
• Familiarity with secure communications technologies, certificate management, HSMs, key lifecycle management, and enterprise PKI architectures.
• Proven ability to influence enterprise security strategy, drive cross-functional initiatives, and serve as a trusted advisor on quantum-resilient security solutions.
• Demonstrated experience leading and supporting accreditation of CSfC solutions, including developing, coordinating, and submitting CSfC Registration Packages and supporting artifacts through the NSA approval process.

Responsibilities

• Serve as the primary ISSO for assigned systems, owning end-to-end RMF execution and supporting successful ATO outcomes.
• Lead security assessment and integration of PQC capabilities in customer environments, aligning with federal guidance, NIST standards, and agency requirements.
• Execute the full RMF lifecycle, including categorization, control implementation, assessment readiness, authorization activities, and continuous monitoring.
• Develop, maintain, and validate security authorization artifacts, including SSPs, POA&Ms, cryptographic inventories, and implementation evidence.
• Evaluate cryptographic architectures and identify risks involving legacy PKI, encryption protocols, key management solutions, and certificate ecosystems.
• Support cryptographic modernization, including crypto-agility planning, hybrid cryptographic implementations, migration roadmaps, and PQC transition strategies.
• Assess emerging technologies, products, managed services, and architectures for security, compliance, quantum readiness, and implementation feasibility in authorized customer environments.
• Partner with engineering, operations, and program teams to remediate vulnerabilities, security findings, cryptographic weaknesses, and compliance gaps.

Benefits

• Comprehensive package featuring a broad range of health, life, and voluntary lifestyle benefits and other perks supporting physical, mental, emotional, and financial wellbeing.
• Bonus structure, including short-term incentives, long-term incentives, and/or sales compensation; details can be discussed during the selection process.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior