PKI, Cryptography and Zero Trust Architect

As a PKI, Cryptography and Zero Trust Architect at Iron Bow Technologies, you will lead the architecture and modernization of the Government's enterprise PKI, key-management, HSM-backed trust, Zero Trust, and post-quantum cryptographic environment. You will define architectures that allow classical and post-quantum cryptography to coexist during the customer's phased transition. This role requires demonstrated experience designing and operating enterprise PKI and key-management architectures, along with working knowledge of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). The position is primarily remote with limited travel to customer facilities.

What you'll do

• Develop enterprise PKI, KMS, cryptographic, and HSM architecture supporting VA operational and cybersecurity requirements
• Architect HSM-backed roots of trust and integration with enterprise Certificate Authorities and KMS platforms
• Design Zero Trust cryptographic controls aligned with NIST SP 800-207 and VA Critical Security Controls
• Integrate HSM architecture with enterprise ICAM services, machine identity, authentication, authorization, and least-privilege controls
• Design hybrid classical/post-quantum cryptographic architectures supporting phased PQC adoption
• Architect parallel PQC/hybrid CA hierarchies to enable transition without disruption to production PKI
• Develop approaches for cross-certification, new trust-anchor distribution, certificate issuance/validation, revocation, OCSP, and enrollment
• Support development of the Zero Trust Implementation Plan and define measurable Zero Trust maturity targets
• Design management-plane segmentation, mutually authenticated communications, machine identity, privileged-access controls, quorum control, and tamper-evident audit capabilities
• Support development and maintenance of the Crypto Agility Plan and Cryptographic Bill of Materials
• Evaluate architectural impacts of evolving NIST, IETF, CNSA 2.0, and Federal cryptographic standards

What you bring

• Demonstrated enterprise PKI architecture and operations experience
• Demonstrated enterprise KMS and HSM architecture experience
• Strong understanding of Zero Trust architecture and NIST SP 800-207
• Experience with HSM-backed roots of trust and enterprise ICAM integration
• Working knowledge of FIPS 203, 204, and 205 and their HSM implementation implications
• Demonstrated experience designing hybrid classical/PQC architectures or cryptographic modernization strategies

Nice to have

• CISSP-ISSAP, SABSA, TOGAF, or comparable security/architecture credentials
• Experience with Federal ICAM/FICAM and PIV/CAC environments
• Experience with Microsoft ADCS and enterprise certificate services
• Experience designing PQC migration strategies for large enterprise environments

About Iron Bow Technologies

Iron Bow Technologies is a next-generation solutions provider delivering mission success across government, healthcare, and commercial industries. The company partners with clients to solve critical challenges through strategic thinking and long-standing partnerships.