Position Title: Post-Quantum Cryptography & Automation Engineer                               

Department: Development/Engineering 

Reports To: President/Chairman    

Supervises: N/A 

Shift: Day 

Work Location: On-site in Lake Mary, FL 

Position Summary: 

The Post-Quantum Cryptography & Automation Engineer is responsible for the secure design, implementation, and management of certificate lifecycle automation and post-quantum cryptographic capabilities. This role requires deep expertise in cryptography (including the evaluation and adoption of quantum-resilient algorithms), scripting, compliance, and data protection strategies in modern hybrid cloud environments. The ideal candidate will demonstrate strong technical, analytical, and communication skills with a proactive, delivery-focused mindset. 

Essential Duties and Responsibilities:  

The essential duties of the position include the following, and other duties may be assigned: 

1. Design, build, and maintain secure technology solutions with a focus on certificate lifecycle management, post-quantum cryptography, and automation. 
2. Evaluate and implement certificate automation practices using tools like Venafi and ADCS/PKI. 
3. Provide engineering support and subject matter expertise related to TLS communications, quantum-resilient cryptographic standards, and certificate troubleshooting. 
4. Collaborate with architecture teams to translate high-level architectural designs into actionable implementation plans, including sizing, operationalization, and future-proofing for post-quantum threats. 
5. Develop implementation, configuration, and engineering documentation for technology rollouts, including migration strategies to quantum-safe cryptographic protocols. 
6. Ensure compliance with industry regulations through robust audit, reporting, and governance processes that account for emerging post-quantum security guidelines. 
7. Support delivery of business-as-usual (BAU) activities alongside strategic initiatives, including pilot deployments of quantum-safe key exchanges. 
8. Automate administrative functions using PowerShell and/or Python to support scalable certificate and key management. 
9. Enable secure data handling in hybrid cloud environments including Microsoft 365, Azure, AWS, and Purview with an emphasis on future-resilient encryption practices. 
10. Support endpoint, network, and data security initiatives as needed, incorporating forward-looking encryption and key management protocols. 
11. Monitor patches and updates, evaluating impacts on existing systems and ensuring proper change control adherence—especially where cryptographic dependencies exist. 
12. Collaborate cross-functionally to ensure successful knowledge transfer, onboarding, and operational support. 
13. Respond to security incidents and support risk mitigation efforts, including readiness against quantum-enabled threat vectors. 
14. Utilize tools such as Power BI and Power Automate for reporting, metrics, and automation. 
15. Participate in limited off-hours on-call support rotations. 

Supervisory Responsibilities:  

N/A 

Qualifications:  

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

Education/Experience:  

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field is required. Minimum of five (5) years of relevant industry experience is required. In lieu of a degree, a comparable combination of education, job-specific certifications, and relevant experience (including military service) will be considered. Experience with Venafi and Active Directory Certificate Services (ADCS) is highly desirable. Records management and experience handling compliance audits are a plus. 

Prior industry experience in highly regulated sectors (e.g., finance, healthcare, technology) is preferred. Deep understanding of certificate lifecycle management and cryptographic principles, including emerging post-quantum encryption standards (e.g., NIST PQC algorithms). Proven experience scripting and automating administrative functions (PowerShell, Python). Hands-on experience with cloud security, data protection, endpoint security, and network protocols. Strong analytical thinking, problem-solving, and technical troubleshooting abilities. Excellent communication skills, especially in simplifying complex technical concepts for non-technical stakeholders. Adaptability to stay current with evolving security threats and technologies, including advancements in quantum computing and their impact on cryptographic integrity. High attention to detail and a strong ethical commitment to data privacy. 

Language Ability:  

Ability to read, analyze, and interpret technical documentation and regulatory requirements. Ability to communicate effectively and professionally, both verbally and in writing. Capable of preparing reports and presenting findings to technical and non-technical audiences. 

Math Ability:  

Ability to perform basic to advanced mathematical operations related to algorithmic design, metric analysis, and cryptographic calculations. 

Reasoning Ability:  

Strong analytical thinking and judgment to troubleshoot and resolve complex technical issues. Ability to interpret diverse technical problems and make logical decisions within a fast-paced environment. 

Computer Skills:  

Expert-level skills in PowerShell and/or Python scripting. Experience with Microsoft 365, Azure, AWS, and Purview. Familiarity with security solutions, including endpoint protection tools, VPNs, firewalls, and intrusion detection systems. Experience using Power BI and Power Automate for metrics and workflow automation. Proficient in working within governance and compliance tools to ensure data protection. 

Certificates and Licenses:  

No specific certifications required, but security certifications (e.g., CISSP, CISM, CEH, or Microsoft/AWS security certifications) are a plus. 

Travel:  

N/A 

Work Environment:  

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job in an office environment. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. A typical, climate-controlled office environment exists. The worker is not substantially exposed to adverse environmental conditions. 

ISM and Privacy Statement: 

1. Legal Compliance: Ensure that the organization’s practices align with applicable data protection and privacy laws (e.g., GDPR, CCPA). 
2. Contractual Privacy Obligations: Review contracts, particularly with third-party vendors or contractors, to ensure they include necessary data protection clauses. 
3. Audit and Reporting: Oversee data protection audits, monitor privacy policy compliance, and prepare necessary reports for regulatory bodies.