PQC Technical Lead

Description

The company is a global financial markets infrastructure and data provider, headquartered in the UK, with operations in 70 countries and 25,000 people, and it has been operating for over 300 years.

This is a senior consultant role leading the practical delivery planning for the organisation's Post-Quantum Cryptography programme. It is a hands-on delivery role, not a research one.

You will work with engineering teams that carry out the migrations, so the plans, patterns and guidance you produce must be realistic and keep operational risk low.

Responsibilities

• Act as the technical lead for PQC and cryptographic agility across the organisation.
• Turn NCSC milestones and business priorities into concrete migration plans.
• Find the cryptographic dependencies across applications, infrastructure, cloud, networks, PKI and third-party services.
• Rank quantum-vulnerable technologies for remediation using a risk-based method.
• Write reusable migration patterns, reference architectures and implementation playbooks.
• Define the migration approach for certificates, TLS, authentication, digital signatures, VPNs and key management.
• Challenge supplier roadmaps where needed, working with the Third-Party Risk Management (TPRM) team.
• Guide engineering teams through design reviews, pilots and technical decisions.
• Prepare executive updates, investment recommendations and risk assessments.
• Explain complex technical issues to senior stakeholders and governance forums.
• Deliver an enterprise PQC strategy and roadmap.
• Deliver a cryptographic discovery and dependency assessment framework.
• Deliver a risk-based remediation and prioritisation model.
• Deliver migration patterns and reference architectures.
• Deliver vendor readiness assessments together with TPRM.
• Deliver technical implementation guidance for engineering teams.

Requirements

• Extensive experience as a senior security architect in a large enterprise, ideally with an engineering background.
• A track record of delivering complex security or infrastructure transformation programmes.
• A solid grasp of PKI and certificate management, TLS and cryptographic protocols, key management and HSMs, identity and authentication platforms, and cloud and hybrid infrastructure.
• Experience building enterprise roadmaps and implementation strategies.
• Strong stakeholder management and communication skills.
• Strong documentation skills, with the ability to pitch documents at the right reader.
• The ability to influence several technology teams without direct authority.
• Highly desirable: previous PQC or crypto-agility programme experience.
• Highly desirable: financial services or critical national infrastructure experience.
• Highly desirable: experience with large application portfolios and customer-facing platforms.
• Highly desirable: familiarity with NCSC and NIST PQC guidance.

Conditions

The role is at Manager career stage.

The company is an equal opportunities employer. It does not discriminate on protected grounds and will reasonably accommodate religious practices and mental health or physical disability needs.

Benefits

• Tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.
• Colleagues can take part in fundraising and volunteering for the company Foundation's charitable grants to community groups.