Cryptography Security Consultant

Join EY's Cybersecurity team as a Cryptography Security Consultant, supporting major organizations in designing, improving, and implementing cryptographic solutions. You will work on projects spanning crypto discovery, cryptographic inventory management, PKI modernization, cryptographic risk assessment, and emerging areas such as post-quantum cryptography and quantum key distribution (QKD). This role combines hands-on technical expertise with consulting problem-solving for enterprise clients.

What you'll do

• Participate in advisory and implementation projects in cryptography, post-quantum cryptography, cybersecurity, and IT infrastructure security for large organizations, including financial institutions and regulated entities.
• Help clients identify and classify cryptographic usage across applications, infrastructure, cloud services, integrations, databases, certificates, and data flows.
• Build and develop crypto inventory and cryptographic bill of materials for clients, defining data models, attributes, update processes, ownership, and integration with client tools.
• Analyze and design PKI architecture, certificate management, lifecycle management, HSM/KMS, TLS/mTLS, electronic signatures, and data encryption mechanisms.
• Prepare maturity assessments, roadmaps, technology recommendations, and implementation documentation for cryptographic modernization, crypto agility, and post-quantum migration initiatives.
• Support clients in proof-of-concept and pilot deployments of crypto discovery, certificate lifecycle management, HSM/KMS, PKI, post-quantum cryptography, or QKD tools, working with technology vendors.
• Conduct workshops with technical and business stakeholders, gather requirements, map processes, and translate technical findings into clear recommendations for decision-makers.
• Co-develop methodologies, service offerings, thought leadership materials, market analyses, and best practices for EY in cryptography, post-quantum cryptography, and cyber resilience.

What you bring

• Minimum 2 years of hands-on experience in cryptography, cybersecurity, IT infrastructure security, security architecture, IAM, PKI, cloud, or related technical areas.
• Practical knowledge of at least two of the following: crypto discovery, crypto inventory, PKI, certificate management, HSM/KMS, TLS/mTLS, data encryption, electronic signatures, secrets management, or cloud security.
• Ability to analyze IT environments and work with architectural documentation, configurations, scan results, asset inventories, and security tool data.
• Understanding of the business context of cybersecurity and cryptography for clients; ability to communicate technical knowledge in ways business stakeholders understand.
• Ability to formulate practical recommendations, prepare clear client materials, and conduct discussions with technical and business teams.
• Project work capability, teamwork, and strong organizational skills in a dynamic environment.
• Fluent Polish and English, enabling project work, documentation preparation, and presentations.
• Technical curiosity, precision, independence, and willingness to learn new areas including post-quantum cryptography and QKD.
• Ability to use AI safely and effectively in daily work, not just in presentations.

Nice to have

• Experience implementing or maintaining PKI, certificate lifecycle management, HSM, KMS, electronic signature systems, crypto discovery tools, or key management platforms.
• Knowledge of standards and best practices such as NIST, ISO/IEC 27001, ETSI, FIPS, PCI DSS, CIS, crypto agility guidelines, or post-quantum cryptography guidance.
• Experience with cloud tools and security services from Microsoft Azure, AWS, or Google Cloud, particularly in key management, secrets management, and certificate management.
• Basic knowledge of automation or scripting, such as Python, PowerShell, Bash, APIs, and working with data in Excel or Power BI.
• Certifications or preparation for certifications such as CISM, CCSP, AZ-500, Security+, ISO 27001, or cloud, security, and PKI certifications from individual vendors.
• Knowledge of cybersecurity aspects in operational technology (OT) environments.
• Knowledge of quantum computing topics.

What we offer

• Participation in projects for major market players and leaders in areas that meaningfully impact cyber resilience and the security of critical digital services.
• Opportunity to develop specialization in cryptography: crypto agility, PKI, post-quantum cryptography, QKD, HSM/KMS, certificate lifecycle management, and cloud security.
• Professional and financial support to obtain recognized qualifications and certifications in cybersecurity, cloud, security architecture, and risk management.
• Collaboration with EY experts from Poland and the international network on projects combining technology, regulation, security architecture, and strategic consulting.
• Access to the best available AI tools as a regular part of daily work, to fully leverage your potential and focus on the most interesting challenges.
• EY Badges, a global competency certification, and the opportunity to obtain an MBA from Hult International Business School.
• A Career Counselor providing professional, individual guidance on building and developing your career.
• A psychoeducational platform offering free consultations with specialists in mental health and personal development, plus access to educational activities.
• A benefits program including private healthcare with additional preventive screening, life insurance, travel benefits, team sports, sports cards, and more.

About EY

EY is a global advisory and technology firm with over 400,000 people across more than 150 countries. In Poland, over 7,000 employees work in Warsaw, Gdansk, Katowice, Krakow, Lodz, Poznan, Szczecin, Rzeszow, Wroclaw, and in Global Delivery Centers in Warsaw and Wroclaw. EY helps organizations solve complex problems, make better decisions, and implement positive change by combining business and technology expertise with artificial intelligence and talent.