Quantum Computing Cryptography Engineer

As a Quantum Computing/Cryptography Engineer (Engineer, 3) at 9th Way Insignia, you provide specialized technical expertise to the Department of Veterans Affairs Cybersecurity Operations Systems Engineering (COSE) program. You assess existing cryptographic technologies, evaluate quantum-related cybersecurity risks, and develop strategies for transitioning VA systems and applications to secure, quantum-resistant cryptographic standards.

What you'll do

• Provide technical expertise in quantum computing, quantum information science, cryptography, and post-quantum cryptography to support VA cybersecurity architecture and engineering initiatives.
• Analyze the potential cybersecurity impact of quantum computing technologies on existing VA systems, applications, infrastructure, data protections, and cryptographic implementations.
• Apply knowledge of quantum mechanics, quantum information theory, and quantum algorithms, including Shor's and Grover's algorithms, to evaluate current and emerging cryptographic risks.
• Assess existing cryptographic implementations, protocols, algorithms, certificates, keys, and supporting technologies to identify systems that may be vulnerable to current or future quantum-enabled threats.
• Develop and maintain an enterprise cryptographic inventory identifying cryptographic algorithms, protocols, implementations, dependencies, technologies, and systems across the VA environment.
• Analyze the cryptographic inventory and establish risk-based migration priorities based on mission criticality, data sensitivity, cryptographic exposure, technology dependencies, and emerging quantum threats.
• Develop and maintain Cryptographic Inventory and Migration Plans defining strategies, timelines, sequencing, and priorities for transitioning VA systems to approved cryptographic standards, including post-quantum cryptography where applicable.
• Develop and recommend Post-Quantum Cryptography migration strategies that enable the VA to transition from existing cryptographic approaches to quantum-resistant algorithms in a controlled and secure manner.
• Provide technical guidance for cryptographic modernization aligned with applicable NIST post-quantum cryptography standards, including FIPS 203, FIPS 204, and FIPS 205.
• Evaluate and recommend quantum-resistant cryptographic algorithms and technologies for use within enterprise systems, applications, networks, cloud environments, data protection solutions, and identity infrastructures.
• Provide subject matter expertise in traditional cryptographic protocols and technologies, including RSA, AES, public-key cryptography, Public Key Infrastructure (PKI), encryption, digital signatures, key management, and related security mechanisms.
• Evaluate interoperability, compatibility, implementation complexity, performance, security, and operational impacts associated with replacing or upgrading legacy cryptographic technologies.
• Identify cryptographic dependencies and potential migration challenges across applications, infrastructure, network technologies, cloud platforms, identity systems, security tools, and enterprise services.
• Support the development of crypto-agile architectures and engineering approaches that enable cryptographic algorithms and technologies to be replaced or upgraded as standards and threats evolve.
• Perform technical analysis, prototyping, modeling, and testing using classical and quantum simulation tools to evaluate quantum algorithms, cryptographic techniques, and potential security impacts.
• Develop, implement, and test cryptographic algorithms and related engineering solutions using programming languages such as Python, C++, and Java.
• Utilize quantum development languages, frameworks, and platforms such as Qiskit, Cirq, Quipper, and the Microsoft Quantum Development Kit to support research, simulation, testing, and technical analysis.
• Conduct specialized security posture assessments for Post-Quantum Cryptography and other emerging technologies, documenting risks, vulnerabilities, technology implications, and recommended mitigation strategies.
• Support security architecture reviews and engineering assessments to identify cryptographic weaknesses, architectural gaps, security risks, attack paths, and residual risk associated with existing and proposed systems.
• Develop technical recommendations for mitigating cryptographic vulnerabilities and reducing exposure to "harvest now, decrypt later" and other quantum-related cybersecurity risks where supported by applicable VA risk assessments and modernization activities.
• Support development of secure solution architectures, security patterns, reference architectures, and engineering guidance incorporating modern and post-quantum cryptographic protections.
• Ensure cryptographic solutions and modernization recommendations align with applicable Federal security standards, VA security requirements, NIST guidance, and enterprise cybersecurity architecture.
• Provide technical input into VA security policies, engineering standards, cryptographic guidance, modernization plans, and governance documentation.
• Participate in technical design reviews, architecture reviews, modernization initiatives, pilots, engineering working groups, and governance forums requiring cryptography or quantum computing subject matter expertise.
• Collaborate with cybersecurity architects, security engineers, application teams, cloud engineers, DevSecOps personnel, network engineers, identity teams, program managers, and Government stakeholders to coordinate cryptographic modernization and PQC migration activities.
• Communicate complex quantum computing and cryptographic risks in clear business and mission terms to technical teams, program leadership, and non-technical executives.
• Develop technical assessments, white papers, implementation recommendations, risk analyses, briefings, and presentations addressing quantum risk, cryptographic posture, migration readiness, and modernization priorities.
• Track emerging quantum-computing capabilities, cryptographic technologies, and evolving standards to identify potential impacts to the VA enterprise and recommend appropriate engineering or modernization actions.
• Support project and lifecycle management activities associated with cryptographic modernization, including requirements development, configuration management, risk tracking, implementation planning, and transition sequencing.
• May require occasional on-site visits.

What you bring

• Minimum of 10 years IT experience, of which at least 5 years are in Quantum Computing and Cryptography experience at a large corporation or Government agency similar in size and scope to GSA, IRS, DoD, or VA. A Master's degree in a related IT field may substitute for up to 2 years of the required experience.
• Expertise in quantum mechanics, quantum algorithms such as Shor's algorithm and Grover's algorithm, and quantum information theory.
• Expertise in quantum programming languages and frameworks such as Qiskit (IBM), Cirq (Google), Quipper, and Microsoft Quantum Development Kit.
• Expertise in cryptographic protocols such as RSA and AES, and principles of Public Key Infrastructure (PKI).
• Expertise in post-quantum cryptography and quantum-resistant algorithms.
• Expertise in existing cryptographic standards and frameworks such as NIST and ISO/IEC 19790.
• Proficiency in programming languages such as Python, C++, and Java for implementing and testing cryptographic algorithms.
• Expertise with classical and quantum simulation tools.
• Expertise working with and advising on quantum-resistant algorithm migration plans and post-quantum cryptography (PQC) implementation strategies, assessing organizational cryptographic inventory, identifying migration priorities, and collaborating with cross-functional teams to communicate quantum risk to non-technical leadership.
• Experience providing policy and guidance inputs for cryptographic modernization aligned with NIST PQC standards (FIPS 203, 204, 205).
• Expertise in project management or working in a project-oriented environment, with an understanding of how configuration management fits into the overall project lifecycle within a large corporation and Government agency similar in size and scope to GSA, IRS, DoD, or VA.

Nice to have

• Bachelor's degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or related fields.
• Certifications such as CASP+ (SecurityX), CCISO, CISA, CISM, CISSP, CISSP-ISSAP, CISSP-ISSEP, GCED, GCIH, GSLC, or CCNP Security.

What we offer

• Comprehensive benefits package including Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&D, STD, LTD, PTO, Telehealth, paid holidays, FSA, and HSA.
• Employee Assistance Program (EAP) and Traveling Assistance resources.
• Security clearance sponsorship (applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information).

About 9th Way Insignia

9th Way Insignia is a service-disabled, veteran-owned small business providing transformative technology to government customers. The company specializes in cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence.