Title: Senior Cybersecurity Engineer Cryptography & Post-Quantum Cryptography (PQC)
Type: Full-Time
Location: Texas Hybrid (3 days onsite)
Job Description:
About the Program
We're running a large-scale effort to automate cybersecurity and cryptographic remediation across a portfolio of roughly 200 enterprise applications. About 128 of them already have a Cryptography Bill of Materials (CBOM) from scanning. What's missing is an automated way to turn those findings into deployable fixes.
To close that gap, the team is building an AI-driven, LangGraph-based multi-agent pipeline. The agents will:
- pull in application data
- check it against a Post-Quantum Cryptography (PQC) and crypto-resilience "North Star" standard: TLS 1.3, AES-256-GCM, and zero hardcoded secrets
- open Infrastructure-as-Code (IaC) pull requests that resolve each vulnerability automatically
Your Role
You'll be the onsite cryptography expert who connects the secure scan data to the remote AI engineering team. Working inside a locked-down environment, you'll study the CBOM findings and turn them into sanitized technical patterns that drive the automation.
What You Bring
Must-Have
- Senior-level, hands-on background spanning Cybersecurity, Cryptography and Security Data Analysis
- Expert command of enterprise encryption protocols (TLS 1.3, IKEv2 IPsec, AES-256), plus modern PQC concepts such as ML-KEM and ML-DSA
- Strong skill querying and interpreting raw security data in JSON, Software Bill of Materials (SBOM) and CBOM formats
- Comfort working within the limits of 10-to-20-year-old business-critical applications and hardware
- Eligible and willing to complete expedited enterprise security onboarding and work onsite under strict zero-data-export handling rules
What You'll Do
Pattern Discovery
- Inspect raw JSON / SBOM / CBOM scan output (produced by tools including Sonatype and CBOM Kit) across ~128 applications
- Cluster applications by infrastructure profile and vulnerability signature. Examples: legacy web apps on TLS 1.2 behind F5 load balancers, or IoT devices carrying hardcoded secrets.
- Surface undocumented legacy constraints: applications that can't easily rotate certificates, hardware with memory limits, and unwritten business rules
Gap Mapping
- Measure each application against the North Star standard:
- TLS 1.0/1.2 moving to TLS 1.3
- weak ciphers moving to AES-256-GCM
- outdated SSH host keys moving to modern standards
- zero hardcoded secrets
- Shape the transition logic for PQC readiness, with emphasis on hybrid TLS and modern key management
Knowledge Handoff
- Produce sanitized, generic characteristic maps that tell the remote Cloud/AI team exactly which remediation templates to build. No proprietary data ever leaves the secure network.
Founded in 2014, ConglomerateIT is a global leader in delivering innovative IT solutions and services. Headquartered in the USA with a presence in the UK, Canada, and India, we specialize in offering industry-leading expertise and cutting-edge products that help our clients maximize their technological investments. Our focus on best-in-class solutions, a highly knowledgeable team, and proactive talent mapping ensure we remain at the forefront of the IT industry.
ConglomerateIT is driven by our Center for Excellence and Innovation, an initiative dedicated to keeping us ahead in a rapidly evolving technology landscape. We understand that building strong relationships is key to our success, and this commitment has enabled us to partner with Fortune 500 companies and leading system integrators worldwide. Our ability to provide local talent on a global scale ensures that we can meet the contingent project requirements of our clients efficiently and effectively.