Cryptography Security Consultant

Join EY's Cybersecurity team as a Cryptography Security Consultant. You'll support large enterprises and organisations in designing, improving and implementing cryptographic solutions. You'll work on projects spanning crypto discovery, building cryptographic inventory registries, PKI modernisation, cryptographic risk assessments, and emerging areas such as post-quantum cryptography and QKD. This role combines practical technical experience with consulting expertise to solve client problems, and you'll work in an environment where AI agents are part of the team and daily project work.

What you'll do

• Participate in consulting and implementation projects in cryptography, post-quantum cryptography, cybersecurity and IT infrastructure security for large organisations, including financial institutions and regulated entities.
• Support clients in identifying and classifying cryptography usage across applications, infrastructure, cloud services, integrations, databases, certificates and data flows.
• Build and develop cryptographic inventory and bills of materials for clients, including defining data models, attributes, update processes, ownership and integration with client tools.
• Analyse and design PKI architecture, certificate management, lifecycle management, HSM/KMS, TLS/mTLS, electronic signatures and data encryption mechanisms.
• Prepare maturity assessments, roadmaps, technology recommendations and implementation documentation for cryptography modernisation, crypto agility and post-quantum algorithm migration initiatives.
• Support clients in proof of concept or pilot deployments of crypto discovery, certificate lifecycle management, HSM/KMS, PKI, PQC or QKD tools, including collaboration with technology vendors.
• Conduct workshops with technical and business stakeholders, gather requirements, map processes and translate technical findings into clear recommendations for decision makers.
• Co-author EY methodologies, proposals, expert materials, market analyses and best practices in cryptography, PQC and cyber resilience.

What you bring

• Minimum 2 years of experience in cryptography, cybersecurity, IT infrastructure security, security architecture, IAM, PKI, cloud or related technical areas.
• Practical knowledge of at least two of: crypto discovery, crypto inventory, PKI, certificate management, HSM/KMS, TLS/mTLS, data encryption, electronic signatures, secrets management or cloud security.
• Ability to analyse IT environments and work with architectural documentation, configurations, scan results, asset registers or data from security tools.
• Understanding of the client's business context regarding cybersecurity and cryptography, and the ability to communicate technical knowledge clearly to business stakeholders.
• Ability to formulate practical recommendations, prepare clear client materials and conduct conversations with technical and business teams.
• Project work skills, teamwork, good work organisation in a dynamic environment.
• Strong Polish and English language skills, enabling project work and preparation of documentation and presentations.
• Technical curiosity, attention to detail, independence and readiness to learn new areas including post-quantum cryptography and QKD.
• Ability to use AI safely and effectively in daily work, not just in presentations.

Nice to have

• Experience implementing or maintaining PKI, CLM, HSM, KMS, electronic signature systems, crypto discovery tools or key management platforms.
• Knowledge of standards and best practices such as NIST, ISO/IEC 27001, ETSI, FIPS, PCI DSS, CIS, crypto agility guidelines or post-quantum cryptography guidelines.
• Experience with cloud tools and security services from Microsoft Azure, AWS or Google Cloud, particularly in key management, secrets management and certificate management.
• Basic knowledge of automation or scripting such as Python, PowerShell, Bash, APIs, and working with data in Excel or Power BI.
• Certifications or preparation for certifications such as CISM, CCSP, AZ-500, Security+, ISO 27001, or vendor-specific certifications in cloud, security or PKI.
• Knowledge of cybersecurity aspects in OT environments.
• Knowledge of quantum computing topics.

What we offer

• Participation in projects for major market leaders and industry leaders in areas that genuinely impact cyber resilience and the security of critical digital services.
• Opportunity to develop expertise in cryptographic specialisation: crypto agility, PKI, PQC, QKD, HSM/KMS, certificate lifecycle management and cloud security.
• Substantive and financial support in gaining recognised qualifications and certifications in cybersecurity, cloud, security architecture and risk management.
• Work with EY experts from Poland and the international network on projects combining technology, regulation, security architecture and strategic consulting.
• Access to the best available AI tools as a permanent part of daily work to fully leverage your potential and focus on the most interesting challenges.
• EY Badges, a global certification of your competencies, and the opportunity to earn an MBA from Hult International Business School.
• A Career Counselor providing professional individual advice on building and developing your career.
• A psychoeducational platform offering free consultations with specialists in mental health and personal development, plus access to educational activities.
• A benefits programme including private healthcare with additional preventive check-ups, life insurance, travel tickets, team sports, sports cards and much more.

About EY

EY is a global consulting and technology firm operating in over 150 countries with more than 400,000 people. In Poland, EY employs over 7,000 professionals across Warsaw, Gdansk, Katowice, Krakow, Lodz, Poznan, Szczecin, Rzeszow and Wroclaw, plus Global Delivery Services centres in Warsaw and Wroclaw. The firm helps organisations solve complex problems, make better decisions and implement positive change through business and technology consulting, utilising artificial intelligence and talent.