Principal Engineer - Classical Cryptography & Architecture

As a Principal Engineer at ID Quantique (part of IonQ), you own the classical cryptography architecture of post-quantum cryptography (PQC) hardware acceleration products targeting hardware security modules (HSMs) and network appliances. You serve as the senior authority for the classical and hybrid cryptographic layer, working alongside PQC architecture leadership to design real-world quantum-safe systems where classical and post-quantum algorithms operate together with careful key management, crypto agility, and safe migration paths.

What you'll do

• Own the architecture and implementation strategy of classical cryptographic functions: symmetric ciphers and modes (AES/GCM and beyond), hash functions (SHA-2/SHA-3, HMAC/KDF constructions), RSA/ECC offload, and true random number generation and entropy architecture (SP 800-90A/B/C)
• Define hybrid classical/post-quantum schemes including key establishment, dual signatures, and composite certificates
• Design and implement crypto-agility mechanisms that allow customers to migrate safely to quantum-safe deployments without breaking existing infrastructure
• Track standardisation of hybrid and composite approaches including NIST guidance, IETF work on hybrid key establishment in TLS 1.3 and IKEv2, and composite certificates alongside PQC architects
• Guide RTL and software engineers implementing classical cores
• Technically evaluate third-party IP and support FIPS 140-3 and CAVP certification of the classical algorithm suite
• Own key-management and key-hierarchy architecture across the product, ensuring interoperability with deployed HSM, TLS, and IPsec ecosystems

What you bring

• A Master's or PhD in Cryptography, Computer Science, Electrical Engineering, or a related field
• At least twelve years of experience implementing and architecting classical cryptography in real products, in hardware, software, or both
• Deep command of symmetric and asymmetric primitives, modes of operation, key management, and entropy generation
• Proven track record taking cryptographic subsystems through FIPS 140-3 or Common Criteria evaluation
• Solid working knowledge of the NIST post-quantum algorithms (ML-KEM, ML-DSA, SLH-DSA) and their deployment constraints
• Understanding of practical constraints in deployed security infrastructure (HSMs, PKI, TLS and IPsec ecosystems) and how hybrid classical/post-quantum schemes are standardised and deployed in practice
• Ability to write precise specifications, guide implementers effectively, and make sound architecture decisions under real-world interoperability constraints
• Fluency in English; French or German is an advantage

What we offer

• Competitive compensation scheme and equity plan
• Comprehensive medical, dental, and vision plans
• 401(k) matching
• Unlimited PTO and paid holidays
• Parental and adoption leave
• Legal insurance and home technology stipend
• Flexible work models
• Ongoing training and development
• Career development plan within the IonQ group

About ID Quantique and IonQ

ID Quantique, part of IonQ, is a global leader in quantum-safe communications, protecting governments, telecommunication infrastructures, and banking and financial institutions from harvest-now, decrypt-later threats with terrestrial and space-based quantum-safe networks in live operation globally. IonQ is the world's leading quantum platform company delivering integrated quantum solutions across computing, networking, sensing, and security, with operations across North America, Europe, and Asia.