Principal System Architect / SME

ShorePoint•Herndon, VA

21h•Remote

About The Position

ShorePoint is seeking a Principal System Architect / subject matter expert (SME) to lead an enterprise Post-Quantum Cryptography (PQC) program for a federal agency and help establish the technical direction for transitioning from classical to quantum-resistant cryptography. This hands-on team lead role provides day-to-day direction to senior architects and engineers, supports workload coordination and partners with government stakeholders to advance PQC migration, crypto-agility and enterprise cybersecurity architecture. The Principal System Architect / SME position requires enterprise security architecture expertise, technical leadership and the ability to communicate complex program status, progress and value to technical teams and leadership. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

Requirements

10+ years of experience in systems architecture, including providing technical supervision and direction to senior architects and staff.
Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
Experience designing and implementing enterprise cybersecurity architectures and capabilities.
Experience developing enterprise cybersecurity architecture requirements with customers and stakeholders.
Experience baselining enterprise cybersecurity capability configurations and validating and verifying implementations and ongoing configuration changes.
Experience creating policy that adheres to CISA maturity models and NIST standards.
Experience with PKI, key management and certificate lifecycle management.
Proven ability to lead teams, build collaboration across stakeholders and communicate complex technical topics to technical and executive audiences through briefings, presentations and written deliverables.
Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Applicants must currently be a U.S. citizen in compliance with federal contract requirements.

Nice To Haves

Experience designing and implementing enterprise cybersecurity architectures that include PQC.
Hands-on experience with PQC standards, including ML-KEM, ML-DSA, SLH-DSA and CNSA 2.0 requirements.
Experience conducting cryptographic inventories and assessing “harvest now, decrypt later” risk exposure.
Hands-on experience piloting PQC or hybrid key exchange in TLS, VPN/IPsec, SSH or code-signing environments.
Experience with automated cryptographic and network discovery tools, including mapping cryptographic dependencies across large environments and building Cryptographic Bills of Materials (CBOMs).
Familiarity with FIPS 140-3 validation, HSMs and vendor PQC readiness roadmaps.
Familiarity with federal PQC policy drivers such as National Security Memorandum 10 (NSM-10), Office of Management and Budget (OMB) Memorandum M-23-02 and CISA PQC guidance.
Experience supporting cybersecurity work for federal government customers, including developing enterprise cybersecurity architecture requirements.
Experience implementing Zero Trust architecture in a federal environment.
Experience with major federal cloud platforms such as Amazon Web Services (AWS) GovCloud, Azure Government or Google Cloud for Government.
Project Management Professional (PMP) certification.
Cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer or Certified Cloud Security Professional (CCSP).
Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Mathematics, Engineering or a related field.

Responsibilities

Lead and technically supervise a team of senior systems architects and engineers, providing daily direction and mentorship.
Advise the project manager on workload distribution and staffing across the systems team.
Shape and support the agency’s PQC migration strategy in alignment with National Institute of Standards and Technology (NIST) post-quantum standards and Commercial National Security Algorithm (CNSA) 2.0 requirements.
Lead and conduct cryptographic inventory and discovery efforts to identify systems, protocols and data stores exposed to quantum decryption risk, including “harvest now, decrypt later” threats.
Establish crypto-agility standards to enable systems to transition between classical and post-quantum algorithms with minimal re-architecture.
Advise on hybrid classical/PQC implementation approaches to protect systems during the migration period.
Evaluate NIST-selected PQC algorithms, including ML-KEM, ML-DSA and SLH-DSA, for suitability across enterprise use cases, performance constraints and system requirements.
Gather and develop enterprise cybersecurity architecture requirements with federal stakeholders, building on analysis from information engineers.
Produce design architectures covering software, hardware and communications that meet current needs and anticipate future cross-functional requirements and interfaces.
Design, implement and baseline enterprise cybersecurity capability configurations.
Validate and verify capability implementations and ongoing configuration changes to confirm they meet intended security outcomes.
Develop policy aligned with Cybersecurity and Infrastructure Security Agency (CISA) maturity models, including the Zero Trust Maturity Model and NIST standards while ensuring architectures remain compatible and compliant with industry and federal standards.
Foster collaboration across government and contractor teams to identify clear paths forward across key task areas.
Develop briefings, presentations and written deliverables that communicate program status, risk reduction and value to technical teams and agency leadership.