资深系统架构师 / 专家
Principal System Architect / SME
我们是谁：
ShorePoint 是一家快速发展的、在行业内获得认可并屡获殊荣的网络安全服务公司，专注于高知名度、高威胁的政府和私营部门客户，这些客户要求有经验并经过验证的安全模型来保护他们的数据。我们秉持“努力工作，尽情享受”的理念，庆祝个人和公司的成功。我们对我们的使命充满热情，致力于超越预期为客户提供服务，同时营造一个支持创造力、责任感、任务成功、批判性思维以及回馈社区的环境。
福利待遇：
作为网络安全精英的一员，我们携手合作，保卫国家的关键基础设施，同时在一个注重个人技术和职业成长的文化中，打造有意义且令人兴奋的职业发展机会。我们坚信，当团队成员幸福且得到良好照顾时，他们能发挥最佳水平。为此，我们提供全面的福利包，包括主要医疗保险公司。突出的福利包括 144 小时带薪休假、11 个节假日、85% 的保险费用报销、401(k) 计划、持续教育、证书维护和报销等。
我们寻找的人：
我们正在寻找一位首席系统架构师/领域专家（SME），领导一个联邦机构的企业后量子密码学（PQC）项目，并帮助确立从传统密码学到抗量子密码学的转型技术方向。这个实际操作的团队领导角色将为高级架构师和工程师提供日常指导，支持工作量协调，并与政府利益相关者合作推进 PQC 迁移、密码灵活性和企业网络安全架构。首席系统架构师/专家职位需要企业安全架构的专业知识、技术领导力，以及能够向技术团队和管理层传达复杂项目的状况、进展和价值。这是一个独特的机会，可以塑造一家令人兴奋且快速发展的网络安全公司的成长、发展和文化。
你将负责：
- 领导并技术监督一支由高级系统架构师和工程师组成的工作团队，提供日常指导和指导。
- 向项目经理提供建议，协助在系统团队内部分配工作量和人员配置。
- 制定并支持该机构的 PQC 迁移策略，在一个
查看英文原文
Who we are:
ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.
The Perks:
As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.
Who we’re looking for:
We are seeking a Principal System Architect / subject matter expert (SME) to lead an enterprise Post-Quantum Cryptography (PQC) program for a federal agency and help establish the technical direction for transitioning from classical to quantum-resistant cryptography. This hands-on team lead role provides day-to-day direction to senior architects and engineers, supports workload coordination and partners with government stakeholders to advance PQC migration, crypto-agility and enterprise cybersecurity architecture. The Principal System Architect / SME position requires enterprise security architecture expertise, technical leadership and the ability to communicate complex program status, progress and value to technical teams and leadership. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.
What you’ll be doing:
- Lead and technically supervise a team of senior systems architects and engineers, providing daily direction and mentorship.
- Advise the project manager on workload distribution and staffing across the systems team.
- Shape and support the agency’s PQC migration strategy in alignment with National Institute of Standards and Technology (NIST) post-quantum standards and Commercial National Security Algorithm (CNSA) 2.0 requirements.
- Lead and conduct cryptographic inventory and discovery efforts to identify systems, protocols and data stores exposed to quantum decryption risk, including “harvest now, decrypt later” threats.
- Establish crypto-agility standards to enable systems to transition between classical and post-quantum algorithms with minimal re-architecture.
- Advise on hybrid classical/PQC implementation approaches to protect systems during the migration period.
- Evaluate NIST-selected PQC algorithms, including ML-KEM, ML-DSA and SLH-DSA, for suitability across enterprise use cases, performance constraints and system requirements.
- Gather and develop enterprise cybersecurity architecture requirements with federal stakeholders, building on analysis from information engineers.
- Produce design architectures covering software, hardware and communications that meet current needs and anticipate future cross-functional requirements and interfaces.
- Design, implement and baseline enterprise cybersecurity capability configurations.
- Validate and verify capability implementations and ongoing configuration changes to confirm they meet intended security outcomes.
- Develop policy aligned with Cybersecurity and Infrastructure Security Agency (CISA) maturity models, including the Zero Trust Maturity Model and NIST standards while ensuring architectures remain compatible and compliant with industry and federal standards.
- Foster collaboration across government and contractor teams to identify clear paths forward across key task areas.
- Develop briefings, presentations and written deliverables that communicate program status, risk reduction and value to technical teams and agency leadership.
What you need to know:
- PQC standards, including NIST-selected ML-KEM (FIPS 203), ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) algorithms and the CNSA 2.0 suite and transition timelines.
- Crypto-agility principles, hybrid cryptographic implementation strategies, public-key infrastructure (PKI), key management and certificate lifecycle management in the context of cryptographic modernization.
- Enterprise cybersecurity architecture across software, hardware and network communications, including configuration baselining, validation and verification practices.
- Federal cybersecurity frameworks and guidance, including NIST Special Publication (SP) 800-series publications, the NIST Cybersecurity Framework and CISA maturity models and how to translate federal policy and mandates into technical requirements and architecture decisions.
- Enterprise network architecture and cryptography across segmentation, routing, secure transport protocols and supporting infrastructure components, including identity and access management systems, directory services, load balancers, firewalls and hardware security modules (HSMs).
- Cloud, hybrid and multi-cloud security architecture, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), cloud key management, shared responsibility models, Federal Risk and Authorization Management Program (FedRAMP) requirements and cryptographic dependencies across applications, operating systems, firmware and third-party products.
Must have’s:
- 10+ years of experience in systems architecture, including providing technical supervision and direction to senior architects and staff.
- Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
- Experience designing and implementing enterprise cybersecurity architectures and capabilities.
- Experience developing enterprise cybersecurity architecture requirements with customers and stakeholders.
- Experience baselining enterprise cybersecurity capability configurations and validating and verifying implementations and ongoing configuration changes.
- Experience creating policy that adheres to CISA maturity models and NIST standards.
- Experience with PKI, key management and certificate lifecycle management.
- Proven ability to lead teams, build collaboration across stakeholders and communicate complex technical topics to technical and executive audiences through briefings, presentations and written deliverables.
- Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
- Applicants must currently be a U.S. citizen in compliance with federal contract requirements.
Beneficial to have:
- Experience designing and implementing enterprise cybersecurity architectures that include PQC.
- Hands-on experience with PQC standards, including ML-KEM, ML-DSA, SLH-DSA and CNSA 2.0 requirements.
- Experience conducting cryptographic inventories and assessing “harvest now, decrypt later” risk exposure.
- Hands-on experience piloting PQC or hybrid key exchange in TLS, VPN/IPsec, SSH or code-signing environments.
- Experience with automated cryptographic and network discovery tools, including mapping cryptographic dependencies across large environments and building Cryptographic Bills of Materials (CBOMs).
- Familiarity with FIPS 140-3 validation, HSMs and vendor PQC readiness roadmaps.
- Familiarity with federal PQC policy drivers such as National Security Memorandum 10 (NSM-10), Office of Management and Budget (OMB) Memorandum M-23-02 and CISA PQC guidance.
- Experience supporting cybersecurity work for federal government customers, including developing enterprise cybersecurity architecture requirements.
- Experience implementing Zero Trust architecture in a federal environment.
- Experience with major federal cloud platforms such as Amazon Web Services (AWS) GovCloud, Azure Government or Google Cloud for Government.
- Project Management Professional (PMP) certification.
- Cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer or Certified Cloud Security Professional (CCSP).
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Mathematics, Engineering or a related field.
it’s done:
· Remote (Herndon, VA).
Originally posted on Himalayas