Role :

- Lead technical discovery, cryptographic inventory and CBOM development.

- Validate architecture, discovery methods and inventory data quality.

- Assess cryptographic dependencies across enterprise infrastructure and applications.

- Guide technical implementation and migration planning.

- Coordinate with customer technical teams and the CBOM partner.

Requirements :

- 7 - 10 years hands-on in enterprise security architecture, cryptography, PKI, TLS, HSMs, IAM or cloud security.

- Demonstrated expertise in PQC, crypto-agility, cryptographic discovery, CBOM and migration planning.

- NIST PQC standards, TLS 1.3, certificate lifecycle management and key management.

- Cryptographic discovery methods : code and binary scanning, network traffic analysis, configuration review, certificate and key store inspection.

- CBOM structure (CycloneDX/SPDX) and inventory data quality against the >90% accuracy benchmark.

- Enterprise network architecture : WAF, load balancers, API gateways, DMZ, service mesh.

- Assessing applications, databases, OS, network devices and third-party products for crypto dependencies.

- At least one enterprise-scale PQC readiness, cryptographic inventory or modernisation engagement.

- Exposure to banking systems and payment rails (UPI, IMPS, NEFT, RTGS, cards, SWIFT, ATM networks).

Good-to-have :

- Hands-on experience with crypto discovery and CLM tools (e.g., Keyfactor, Venafi, AppViewX).

- HSM platforms (e.g., Thales, Entrust, Utimaco) and cloud KMS.

- Python scripting.

- Treasury and trade finance system exposure.