Quantum Computing​/Cryptography Engineer

Quantum Computing/Cryptography Engineer

McLean, Virginia, United States

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.

We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Quantum Computing / Cryptography Engineer

Location:

Remote (preference to local Washington, DC area)

Clearance:
Public Trust

Employment Type:

Full-time

Compensation: $160K - $180K DOE

Position Summary

Revolutional is seeking a Quantum Computing / Cryptography Engineer to lead the development and maintenance of an enterprise Cryptographic Inventory and Migration Plan in support of an anticipated Veterans Affairs (VA) program. This role owns the technical thread from cryptographic discovery through compliance validation and migration execution — identifying every cryptographic asset in use across VA systems, assessing its compliance against federally mandated standards, and building the roadmap to modernize non-compliant and quantum-vulnerable cryptography, including migration to NIST-approved post-quantum cryptography (PQC) algorithms.

The ideal candidate is comfortable moving between quantum computing theory, cryptographic engineering, and enterprise-scale risk and migration planning at the compliance rigor of a major federal agency.

Key Responsibilities

• Develop and deliver the enterprise Cryptographic Inventory and Migration Plan, serving as the authoritative record of all cryptographic assets and technologies deployed across VA systems, applications, and devices, with an initial version due within 120 calendar days of contract award and updated versions submitted semi-annually thereafter.
• Build and maintain a comprehensive cryptographic inventory detailing all algorithms, protocols, libraries, modules, hardware security modules (HSMs), key management systems, certificates, and related dependencies in use across the enterprise.
• Assess and document the compliance status of each cryptographic element against VA-approved and federally mandated standards, including FIPS 140-2/3.
• Identify all instances of non-compliant, legacy, or deprecated cryptographic algorithms and mechanisms, and evaluate the associated risk.
• Define detailed migration strategies for replacing or upgrading non-compliant or at-risk cryptographic elements, including actionable steps, technical requirements, and resource needs.
• Establish timelines and prioritization for migration activities, focusing first on assets and systems identified as highest risk or most critical to VA's mission and data protection objectives.
• Incorporate post-quantum cryptography (PQC) considerations by identifying systems and processes impacted by emerging quantum computing threats and specifying plans to migrate to NIST-approved PQC algorithms (e.g., FIPS 203, 204, 205) once available and appropriate, in accordance with VA guidance.
• Define roles and responsibilities for migration activities and coordinate execution with business and infrastructure owners across the enterprise.
• Establish and maintain processes for ongoing review and ad hoc updates to the cryptographic inventory as the environment evolves.
• Develop risk mitigation approaches for interim periods during which legacy or non-compliant cryptography must continue to be maintained.
• Develop metrics and reporting mechanisms to track migration progress and validate achievement of milestones.
• Advise program leadership and cross-functional, non-technical stakeholders on quantum computing risk, cryptographic modernization priorities, and PQC implementation strategy.
• Provide policy and guidance inputs to support cryptographic modernization efforts aligned with NIST PQC standards.
• Ensure cryptographic engineering and migration practices align with applicable compliance requirements and regulatory standards, including NIST and ISO/IEC 19790.

Requi…