Senior Cybersecurity Consultant

Job Title: Senior Cybersecurity Consultant (Post Quantum Cryptography)

Location: 100% Remote (Must be legally entitled to work in Canada)

Start Date: ASAP

Duration: 3–4 Month Contract (possibility of extension)

Hours: 40 hours/week (Monday–Friday)

Rate: $120/hr Inc.

Overview

Our client is seeking a Senior Cybersecurity Consultant to lead a Post Quantum Cryptography (PQC) Readiness Discovery engagement. This role will focus on assessing the enterprise IT environment, identifying cryptographic dependencies, and developing a comprehensive Cryptographic Bill of Materials (CBOM) to support future migration to Post Quantum Cryptography standards. The ideal candidate brings extensive experience in enterprise cybersecurity consulting, security architecture, cryptography, PKI, and risk assessments within large enterprise or critical infrastructure environments.

Responsibilities

• Lead a Post Quantum Cryptography (PQC) readiness assessment across the enterprise environment.
• Develop a comprehensive Cryptographic Bill of Materials (CBOM).
• Inventory cryptographic assets, certificates, encryption algorithms, and key management systems.
• Assess cryptographic dependencies across applications, infrastructure, and cloud environments.
• Conduct security architecture reviews, risk assessments, and stakeholder workshops.
• Document findings, risks, and remediation recommendations, producing executive-ready reports and a PQC migration roadmap aligned with evolving NIST standards.
• Evaluate third-party technologies for cryptographic dependencies.

Qualifications

• 10+ years of cybersecurity consulting experience.
• Strong expertise in security architecture, enterprise security programs, cryptography, PKI, certificate lifecycle management, key management systems (HSMs/KMS), TLS/SSL, and Identity & Access Management.
• Experience conducting PQC readiness assessments, cryptographic inventories, CBOM development, algorithm discovery, and dependency mapping.
• Knowledge of RSA, ECC, ML-KEM, ML-DSA, NIST PQC standards, Azure, Microsoft Entra ID, Microsoft Defender, and hybrid cloud environments.
• Excellent communication, stakeholder engagement, technical documentation, and executive presentation skills.
• Experience within Energy & Utilities, Critical Infrastructure, or other highly regulated industries is considered a strong asset.
• Relevant certifications such as CISSP, CCSP, CISM, CISA, GIAC, or Microsoft Security certifications are preferred.