Cryptography & PQC Consultant (all genders)

You help customers understand their cryptographic dependencies and develop a viable path to post-quantum cryptography. The focus is on inventory, prioritisation and practical testing. You distinguish between standardised methods, vendor support and unresolved integration questions.

Before changing a method, it must be clear which applications and key processes are affected. You examine libraries, protocols and certificates and classify them by protection requirements. The required protection period for data influences priority. PQC and hybrid approaches are tested for support, interoperability and performance. A migration plan identifies vendor dependencies and controlled transitions rather than making unsupported security promises.

• Record cryptographic methods, certificates, keys and protocol dependencies in applications and infrastructure.
• Translate protection requirements, data lifetimes and technical dependencies into transparent migration priorities.
• Test crypto-agility and suitable PQC or hybrid methods in test environments and evaluate interoperability and performance.
• Create migration plans with interfaces to PKI, HSM and software development and document unresolved risks.
• Inventory cryptographic dependencies by protocol, library, key type and system.
• Evaluate PQC and hybrid options using interoperability, size and runtime measurements.

What matters is demonstrable experience that is relevant to the role. It may come from appropriate vocational training, a degree, professional practice or a well-founded career change. We will align the specific level of responsibility with your knowledge and experience.

• Solid foundations in cryptography and experience with software or security integration.
• Ability to read standards and technical implementations critically and assess them in practice.
• Understanding of protocols, certificates and planning controlled changes.

This knowledge is helpful, but you do not need to have all of it at once. In your application, describe where you have already gained practical experience and which areas you would like to explore in greater depth.

• Practical experience with PQC methods, hybrid protocols or cryptographic inventories.
• Knowledge of PKI, HSM or performance evaluation of cryptographic implementations.

You deliver a reliable overview of dependencies and a verifiable migration path. You state the limitations of the current product and standards landscape rather than promising blanket quantum security.

This role can be based in Cologne or performed remotely. We will agree the specific form of collaboration, project requirements and any necessary customer appointments before you start.

This role is offered as permanent employment on a full-time or part-time basis. We will agree the responsibilities, working hours, start date and compensation to suit the role and your level of experience.

Show us in your application which experience or interests you bring to this role. A CV and relevant project examples, certificates or work samples will help us assess your professional background. Please do not send confidential customer data, credentials or protected source code.

Tell us your preferred working model, your possible start date and whether you would like to work full-time or part-time.

If you have questions about the role, contact our recruitment team at hr@otoko.com. Inclusion in the applicant pool is voluntary and takes place only with separate consent; it is not a prerequisite for reviewing your application.