Quantum Cryptography Policy, Strategy, and Migration SME

The Post-Quantum Cryptography Policy and Migration SME IV will provide senior-level cryptographic expertise in support of Department of War post-quantum cryptography initiatives. The position focuses on cryptographic inventory implementation, PQC policy development, migration planning, technical assessments, and enterprise-level adoption of quantum-resistant cryptographic solutions.

The ideal candidate will advise senior Government leadership and DoW stakeholders on cryptographic dependencies, migration risks, solution viability, and practical implementation pathways across devices, applications, networks, embedded systems, and enterprise environments.

• Develop a synchronized DoW-wide methodology for implementing and maintaining cryptographic inventories across devices, applications, networks, and embedded systems.
• Support cryptographic inventory timelines, milestones, tasking, reporting requirements, and deliverables in accordance with OMB guidance and Government direction.
• Collaborate with Combatant Commands, Services, Agencies, DISA, and other stakeholders to establish consistent inventory processes, data requirements, and outputs.
• Research, develop, and draft DOW PQC policies, governance frameworks, implementation guidance, and migration roadmaps aligned with NSM-10, NIST standards, and DOW mission requirements.
• Identify cryptographic migration challenges, system dependencies, interoperability concerns, technical gaps, and potential mission or functionality impacts.
• Develop migration scenarios, implementation-plan mappings, technical reports, and practical recommendations for transitioning algorithms, protocols, public key infrastructure, authentication mechanisms, and encryption services.
• Conduct technical briefings, use-case reviews, solution assessments, and implementation-plan evaluations to support DOW PQC planning and decision-making.
• Provide cryptographic technical consultation supporting research, engineering, architecture, policy, and enterprise transition activities.
• Develop executive briefings, technical reports, decision papers, roadmaps, and other documentation for technical and nontechnical audiences.
• Facilitate technical meetings and collaborate with organizations such as DIU, DISA, NSA, NIST, USCYBERCOM, DOW components, cloud providers, and industry partners.
• Assess government and commercial PQC solutions for security, maturity, scalability, interoperability, operational suitability, and alignment with DOW use cases.
• Maintain visibility of industry capabilities, vendor solutions, implementation risks, and emerging technologies relevant to DOW PQC adoption.
• Advise Government leadership on enterprise cryptographic deployment, update, sequencing, and risk-management considerations.

• Active Top Secret/Sensitive Compartmented Information clearance required.
• Ph.D. in mathematics, computer science, cryptography, cybersecurity, electrical engineering, or a related field, with at least 20 years of related professional experience in cryptography; OR Master’s degree in a related field, with at least 22 years of related professional experience in cryptography.
• Demonstrated experience providing senior-level technical leadership for enterprise cryptographic programs, cybersecurity initiatives, or large-scale technology modernization efforts.
• Experience developing technical policy, implementation frameworks, migration strategies, roadmaps, or governance documentation for federal or DOW organizations.
• Expert knowledge of classical and post-quantum cryptography, cryptographic algorithms, protocols, cipher suites, key management, public key infrastructure, encryption, authentication, and cryptographic agility.
• Experience identifying, documenting, and managing cryptographic dependencies across applications, devices, networks, cloud environments, and embedded systems.
• Knowledge of NSM-10, OMB Memorandum M-23-02, NIST PQC standards, CNSS issuances, and related federal cryptographic guidance.
• Experience assessing migration risks, compatibility, interoperability, performance impacts, and operational constraints.
• Ability to evaluate commercial, cloud-based, open-source, and government…