Post-Quantum Cryptography Engineer
Leidos
- Location
- 6314 Remote/Teleworker US
- Work model
- Remote
- Level
- Mid
- H-1B history
- 26 approvals (FY2023)
- Posted
- Sep 10, 2026
Skills
About this role
The Digital Sector at Leidos currently has an opening for a Post‑Quantum Cryptography (PQC) Engineer. This remote role supports the Department of Veterans Affairs (VA) Office of Information & Technology (OIT), Office of Information Security (OIS), on the Cybersecurity Operations Systems Engineering (COSE) program. As a PQC Engineer, you will contribute to the design, implementation, assessment, and continuous improvement of enterprise security architecture and engineering capabilities across the VA’s IT environment. Your work will help unify enterprise‑wide cybersecurity practices and support alignment with Zero Trust principles, NIST frameworks, and federal cybersecurity requirements. You will collaborate with cross‑functional teams to strengthen the VA’s ability to protect sensitive information for more than 18 million Veterans, Families, and Caregivers. In this role, you will provide specialized expertise in quantum computing, cryptography, post‑quantum cryptography, and cryptographic modernization in support of the VA COSE program. You will evaluate existing cryptographic technologies, assess quantum‑related cybersecurity risks, and develop strategies for transitioning VA systems and applications to secure, quantum‑resistant cryptographic standard This position is contingent upon contract award.
Primary Responsibilities
Provide technical expertise in quantum computing, quantum information science, cryptography, and post-quantum cryptography to support VA cybersecurity architecture and engineering initiatives. Analyze the potential cybersecurity impact of quantum computing technologies on existing VA systems, applications, infrastructure, data protections, and cryptographic implementations. Apply knowledge of quantum mechanics, quantum information theory, and quantum algorithms, including algorithms such as Shor’s and Grover’s algorithms, to evaluate current and emerging cryptographic risks. Assess existing cryptographic implementations, protocols, algorithms, certificates, keys, and supporting technologies to identify systems that may be vulnerable to current or future quantum-enabled threats. Develop and maintain an enterprise cryptographic inventory identifying cryptographic algorithms, protocols, implementations, dependencies, technologies, and systems across the VA environment. Analyze the cryptographic inventory and establish risk-based migration priorities based on mission criticality, data sensitivity, cryptographic exposure, technology dependencies, and emerging quantum threats. Develop and maintain Cryptographic Inventory and Migration Plans defining strategies, timelines, sequencing, and priorities for transitioning VA systems to approved cryptographic standards, including post-quantum cryptography where applicable. Develop and recommend Post-Quantum Cryptography migration strategies that enable the VA to transition from existing cryptographic approaches to quantum-resistant algorithms in a controlled and secure manner. Provide technical guidance for cryptographic modernization aligned with applicable NIST post-quantum cryptography standards, including FIPS 203, FIPS 204, and FIPS 205. Evaluate and recommend quantum-resistant cryptographic algorithms and technologies for use within enterprise systems, applications, networks, cloud environments, data protection solutions, and identity infrastructures. Provide subject matter expertise in traditional cryptographic protocols and technologies, including RSA, AES, public-key cryptography, Public Key Infrastructure (PKI), encryption, digital signatures, key management, and related security mechanisms. Evaluate interoperability, compatibility, implementation complexity, performance, security, and operational impacts associated with replacing or upgrading legacy cryptographic technologies. Identify cryptographic dependencies and potential migration challenges across applications, infrastructure, network technologies, cloud platforms, identity