Cryptography Solutions Architect

We are currently recruiting for a Cryptography Solutions Architect with Venafi experience to join one of our Insurance clients on a 6-month contract.

Inside IR35

Hybrid

Key Responsibilities

• Design and implement cryptographic key management solutions, ensuring key ownership (HYOK, BYOK) is aligned to risk appetite, covering HSMs, cloud key services (Azure Key Vault, AWS KMS, GCP Cloud KMS), KMaaS, and on-premises key stores.
• Shape the key sovereignty and crypto-agility and post-quantum readiness strategies for algorithm deprecation and PQC adoption.
• Align cryptographic controls with regulatory requirements, data sovereignty, data classification & Zero Trust principles, and key sovereignty (BYOK/HYOK/DKE patterns).
• Produce high-quality architecture artefacts: HLDs, LLDs, reference architecture, architecture decision records (ADRs), design patterns, standards, key hierarchy models, TIME models, technology radars to support engineering and platform teams.
• Provide SME leadership to support vendor engagement, RFP and technical evaluations, proof-of-value, and architecture assessment for new products and services.
• Assess the architectural implications of emerging cryptographic technologies and standards (e.g. NIST PQC outputs, homomorphic encryption, MPC), providing informed recommendations on adoption and transition pathways.
• Collaborate with Engineering, Platform & Operations teams to ensure architectural patterns are translated into practical, operable implementations, consistently embedded into development pipelines, CI/CD workflows, and infrastructure-as-code, promoting a secure-by-design and automation-first culture.
• Embed cryptography governance and controls in designs, adhering to Cryptography Standards and aligning with NIST, FIPS, ISO27001/2, SOC2, DORA, HIPPA, PCI DSS, and relevant financial services and privacy regulations.