Network Security Architect – Quantum Safe & Post-Quantum Cryptography (PQC)

🧩 What are we looking for?

✔️ Between 2 and 4 years of experience in network security, cybersecurity, cryptography, or related technical areas.

✔️ Knowledge of secure communication protocols, especially TLS, HTTPS, SSH, IPSec, MACsec, EAP-TLS, and VPN.

✔️ Knowledge of applied cryptography, encryption, digital certificates, and PKI infrastructures.

✔️ Interest or knowledge in Post-Quantum Cryptography (PQC), Quantum Safe, and Crypto Agility.

✔️ Ability to analyze cryptographic configurations, identify technical risks, and collaborate in the definition of remediation plans.

✔️ Knowledge of network and security architecture, as well as corporate infrastructure environments.

✔️ Analytical capacity, organization, and communication skills to work with technical teams and different areas of the organization.

✔️ Valuable experience in automation, asset inventory, vulnerability management, or technical documentation preparation.

💼 What do we offer?

🚀 Participation in a strategic technological transformation and cybersecurity project.

🔐 Opportunity to work on emerging post-quantum cryptography initiatives and the evolution of security architectures.

🤝 Collaborative environment within a multinational consultancy.

📈 Professional development in network security, cryptographic architecture, and Quantum Safe technologies.

At Excelia, a multinational Consulting, Technology, and Professional Services firm, we continue to grow and are looking for a Mid-Level Network Security professional, with experience in network security, cryptography, and secure communication protocols, to join a strategic technological transformation and cybersecurity project.

If you have experience in network security, cryptographic protocols, PKI, or encryption, and you are interested in participating in initiatives to evolve towards Quantum Safe and Post-Quantum Cryptography (PQC) technologies, this opportunity could be for you! 👇

🚀 What will you do in your day-to-day role?

🔐 Inventory and assessment of cryptographic protocols

• Preparation and maintenance of inventories of TLS versions used in applications, infrastructures, and corporate services.

• Identification of systems using TLS versions prior to 1.3 and analysis of associated risks.

• Assessment of the cryptographic exposure of assets and definition of update and remediation priorities.

• Analysis of technical dependencies, costs, and necessary efforts for migration.

⚛️ Quantum Safe assessment and post-quantum cryptography

• Identification of cryptographic algorithms potentially vulnerable to advances in quantum computing.

• Analysis of key exchange mechanisms, digital signatures, and certificates.

• Assessment of platform readiness to adopt post-quantum cryptography (PQC) algorithms.

• Collaboration in the design of Crypto Agility strategies that allow cryptographic mechanisms to evolve progressively.

🌐 Inventory of networks and communication protocols

• Identification and analysis of assets using protocols such as IPSec, MACsec, EAP-TLS, SSH, HTTPS, and corporate VPNs.

• Review of PKI infrastructures and authentication and encryption mechanisms.

• Identification of dependencies between applications, networks, and identity management systems.

• Collaboration with infrastructure and communications teams to assess compatibility with future cryptographic solutions.

🏗️ Architecture and migration planning

• Participation in the definition of the target architecture for the adoption of Quantum Safe technologies.

• Preparation of migration plans and coexistence strategies between current and future technologies.

• Identification of phases, milestones, risks, and dependencies of the transformation process.

• Coordination with manufacturers and technology providers to evaluate solutions and implementation alternatives.

📊 Governance, monitoring, and reporting

• Preparation of technical and executive reports on the state of cryptographic security.

• Monitoring of risk indicators, asset evolution, and remediation plans.

• Preparation of technical documentation and improvement proposals.

• Coordination of workshops with Communications, Security, Infrastructure, Architecture, and Applications teams.

📍 Location: Madrid, Las Tablas

🏡 Hybrid modality: 2 days of remote work per week.