Post-Quantum Cryptography (PQC) Consultant / Security Architect - Inside IR35 - Up to £900 per day

Post-Quantum Cryptography (PQC) Consultant / Security Architect

Location: London

Contract: Contract / Inside IR35

Working: Hybrid

Start: ASAP

We are looking for an experienced Post-Quantum Cryptography (PQC) Consultant / Security Architect to support a major Financial Services organisation with its assessment and preparation for the transition to quantum-resistant cryptography.

The role will focus on assessing the organisation's existing cryptographic estate, identifying vulnerabilities and dependencies, developing remediation strategies and working with technical teams to implement a practical PQC migration roadmap.

This is a consulting and enterprise security architecture role, requiring strong understanding of cryptography alongside the ability to work across complex technology environments.

Key Responsibilities

• Assess existing applications, infrastructure and technology platforms for quantum-vulnerable cryptography.
• Identify the use of cryptographic algorithms, certificates, PKI and related security technologies across the enterprise.
• Assess PQC vulnerabilities, risks, dependencies and potential business impact.
• Develop recommendations and prioritised remediation plans for vulnerable systems.
• Define target architectures and migration approaches supporting PQC and crypto-agility.
• Work with application, infrastructure, cloud and security teams to implement remediation recommendations.
• Provide technical guidance on transitioning from legacy cryptographic technologies towards quantum-resistant alternatives.
• Support the development of PQC roadmaps, assessments and technical documentation.
• Engage with senior stakeholders, architects and engineering teams to communicate risks and remediation requirements.
• Provide consulting expertise throughout assessment, planning and implementation phases.
• Help establish practical approaches for managing cryptographic risk across a complex enterprise environment.
• Strong experience in Cyber Security, Security Architecture or Cryptography.
• Proven understanding of Post-Quantum Cryptography (PQC) and the risks posed by future quantum computing.
• Experience conducting PQC or cryptographic assessments across enterprise technology estates.
• Ability to identify vulnerabilities and translate findings into practical remediation strategies.
• Strong Enterprise Architecture / Security Architecture experience.
• Experience developing and implementing security remediation plans.
• Strong consulting and stakeholder management skills.
• Previous experience within Financial Services / Banking.
• Ability to work across complex infrastructure, applications and cloud environments.

Technical Knowledge

• Public Key Cryptography
• RSA / ECC
• PKI and certificate management
• TLS / SSL
• Cryptographic algorithms and protocols
• HSMs
• Cryptographic inventories
• Crypto-agility
• Cloud security and cryptography
• Application security
• Network security
• Vulnerability and risk assessment
• PQC migration strategies
• NIST PQC standards
• Experience with ML-KEM, ML-DSA or other post-quantum algorithms.
• Knowledge of NIST Post-Quantum Cryptography standards.
• Experience developing enterprise-wide cryptographic inventories or Cryptography Bill of Materials (CBOM).
• Experience with large-scale technology transformation or security remediation programmes.
• Previous experience within investment banking or other highly regulated Financial Services environments.

The ideal candidate will combine strong cryptography/PQC knowledge with enterprise security architecture and consulting experience. You should be comfortable assessing complex technology estates, explaining cryptographic risks to both technical and senior stakeholders, and turning assessments into clear, prioritised remediation plans.

We are particularly interested in candidates who have experience moving organisations from PQC assessment and strategy through to practical remediation and implementation.