Security Solutions Consultant

We are seeking an experienced Consultant to lead critical client engagements focused on cryptographic risk mitigation, encryption modernization, key lifecycle management, and quantum-resilient architecture. In this role, you will perform comprehensive cryptographic discovery, inventory assessments, analysis, documentation, and remediation support while collaborating directly with client technical teams under the guidance of Lead and Principal Consultants.

• Support delivery of cryptographic maturity evaluations, PQC readiness assessments, and key management capability reviews
• Conduct interviews, workshops, and data gathering sessions to assess current environments
• Execute enterprise-wide cryptographic asset discovery across algorithms, certificates, keys, protocols, and encryption dependencies using advanced scanning tools and manual analysis techniques
• Analyze "harvest now, decrypt later" exposure risks based on data sensitivity and shelf life considerations
• Gather and document third-party and supply chain cryptographic dependencies including SaaS providers, payment processors, certificate authorities (CAs), and embedded systems
• Build and maintain dynamic cryptographic inventories to support migration planning and risk quantification efforts
• Assess key management lifecycle practices covering generation, distribution, rotation, revocation, escrow, and destruction against industry leading standards
• Analyze PKI environments including CA hierarchies, certificate lifecycle management (CLM), and automated enrollment protocols such as ACME, SCEP, and EST
• Review encryption controls across all data states: at-rest, in-transit, and in-use, with specific focus on TLS configurations and cipher suite hygiene
• Support development of risk-based PQC migration plans and prioritization models that account for data longevity versus quantum timeline estimates
• Research NIST-selected post-quantum (PQC) algorithms, hybrid key exchange approaches such as ML-KEM combined with classical ECDH, and vendor-specific PQC roadmaps
• Contribute to policies, standards, and cryptographic baseline documentation frameworks
• Track remediation progress meticulously while maintaining engagement artifacts and working papers
• Map findings directly to NIST guidance, established cryptographic controls, and regulatory expectations including GDPR/CCPA compliance requirements
• Support clear communication of cryptographic risk in both business and regulatory terms for executive stakeholders
• Build deep expertise in cryptography, key management, PKI, and post-quantum readiness through hands-on engagement work, continuous training, and professional certifications
• Contribute to practice assets including customizable templates, accelerators, and research summaries that drive efficiency across the team
• Support whitepaper development, client workshops, and internal enablement sessions to foster knowledge sharing