Team (Project) Introduction
The Department of Veterans Affairs (VA) Cybersecurity Operations Systems Engineering (COSE) project serves as an overarching technical engine that unifies Architecture and Engineering Services throughout the VA Enterprise. This program implements cohesive organizational security architecture and underlying engineering components that utilize national security standards, guidelines, and frameworks. COSE bridges the gap between high-level business requirements and technical structures, enabling the consistent deployment of secure technologies through implementation guidance and the establishment of an analytic library. Systems security engineering within COSE contributes a holistic perspective to the systems engineering effort, ensuring that stakeholder protection needs are addressed throughout the entire system life cycle from concept and development to production, support, and decommissioning. By drawing upon well-established systems engineering and security principles, COSE adapts and supplements practices to protect intellectual property, data, and the methods used to create VA systems. These activities improve the security posture of VA applications to prevent, deter, or detract from cyberattacks by nefarious adversaries or insider threats.

9^th Way Insignia is looking for an Engineer, 3, Quantum Computing/Cryptography Engineer to join this team.

Professional Level Information:
An Engineer, 3 typically plans and directs research or development work on complex projects, along with engaging various parties in design and development. Costs and recommendations of new components may also involve part of the job scope. Performs multiple engineering-related tasks in various assignments within the project and firm. An Engineer, 3 oversees the design, development, implementation, and analysis of technical products and systems.  An Engineer, 3 has broad knowledge of engineering procedures and assists in the resolution of complex problems.  An Engineer, 3 has strong technical skills and background, a knack for learning new technologies, and a blend of good problem-solving and innovation needed to resolve a wide variety of technical production challenges.

Functional Job (LCAT) Information:
The Quantum Computing/Cryptography Engineer will provide specialized engineering and technical expertise in quantum computing, cryptography, post-quantum cryptography (PQC), and cryptographic modernization in support of the VA COSE program. The engineer will assess existing cryptographic technologies, evaluate quantum-related cybersecurity risks, and develop strategies for transitioning VA systems and applications to secure, quantum-resistant cryptographic standards.

Responsibilities:

• Provide technical expertise in quantum computing, quantum information science, cryptography, and post-quantum cryptography to support VA cybersecurity architecture and engineering initiatives.
• Analyze the potential cybersecurity impact of quantum computing technologies on existing VA systems, applications, infrastructure, data protections, and cryptographic implementations.
• Apply knowledge of quantum mechanics, quantum information theory, and quantum algorithms, including algorithms such as Shor’s and Grover’s algorithms, to evaluate current and emerging cryptographic risks.
• Assess existing cryptographic implementations, protocols, algorithms, certificates, keys, and supporting technologies to identify systems that may be vulnerable to current or future quantum-enabled threats.
• Develop and maintain an enterprise cryptographic inventory identifying cryptographic algorithms, protocols, implementations, dependencies, technologies, and systems across the VA environment.
• Analyze the cryptographic inventory and establish risk-based migration priorities based on mission criticality, data sensitivity, cryptographic exposure, technology dependencies, and emerging quantum threats.
• Develop and maintain Cryptographic Inventory and Migration Plans defining strategies, timelines, sequencing, and priorities for transitioning VA systems to approved cryptographic standards, including post-quantum cryptography where applicable.
• Develop and recommend Post-Quantum Cryptography migration strategies that enable the VA to transition from existing cryptographic approaches to quantum-resistant algorithms in a controlled and secure manner.
• Provide technical guidance for cryptographic modernization aligned with applicable NIST post-quantum cryptography standards, including FIPS 203, FIPS 204, and FIPS 205.
• Evaluate and recommend quantum-resistant cryptographic algorithms and technologies for use within enterprise systems, applications, networks, cloud environments, data protection solutions, and identity infrastructures.
• Provide subject matter expertise in traditional cryptographic protocols and technologies, including RSA, AES, public-key cryptography, Public Key Infrastructure (PKI), encryption, digital signatures, key management, and related security mechanisms.
• Evaluate interoperability, compatibility, implementation complexity, performance, security, and operational impacts associated with replacing or upgrading legacy cryptographic technologies.
• Identify cryptographic dependencies and potential migration challenges across applications, infrastructure, network technologies, cloud platforms, identity systems, security tools, and enterprise services.
• Support the development of crypto-agile architectures and engineering approaches that enable cryptographic algorithms and technologies to be replaced or upgraded as standards and threats evolve.
• Perform technical analysis, prototyping, modeling, and testing using classical and quantum simulation tools to evaluate quantum algorithms, cryptographic techniques, and potential security impacts.
• Develop, implement, and test cryptographic algorithms and related engineering solutions using programming languages such as Python, C++, and Java.
• Utilize quantum development languages, frameworks, and platforms such as Qiskit, Cirq, Quipper, and the Microsoft Quantum Development Kit to support research, simulation, testing, and technical analysis.
• Conduct specialized security posture assessments for Post-Quantum Cryptography and other emerging technologies, documenting risks, vulnerabilities, technology implications, and recommended mitigation strategies.
• Support security architecture reviews and engineering assessments to identify cryptographic weaknesses, architectural gaps, security risks, attack paths, and residual risk associated with existing and proposed systems.
• Develop technical recommendations for mitigating cryptographic vulnerabilities and reducing exposure to “harvest now, decrypt later” and other quantum-related cybersecurity risks where supported by applicable VA risk assessments and modernization activities.
• Support development of secure solution architectures, security patterns, reference architectures, and engineering guidance incorporating modern and post-quantum cryptographic protections.
• Ensure cryptographic solutions and modernization recommendations align with applicable Federal security standards, VA security requirements, NIST guidance, and enterprise cybersecurity architecture.
• Provide technical input into VA security policies, engineering standards, cryptographic guidance, modernization plans, and governance documentation.
• Participate in technical design reviews, architecture reviews, modernization initiatives, pilots, engineering working groups, and governance forums requiring cryptography or quantum computing subject matter expertise.
• Collaborate with cybersecurity architects, security engineers, application teams, cloud engineers, DevSecOps personnel, network engineers, identity teams, program managers, and Government stakeholders to coordinate cryptographic modernization and PQC migration activities.
• Communicate complex quantum computing and cryptographic risks in clear business and mission terms to technical teams, program leadership, and non-technical executives.
• Develop technical assessments, white papers, implementation recommendations, risk analyses, briefings, and presentations addressing quantum risk, cryptographic posture, migration readiness, and modernization priorities.
• Track emerging quantum-computing capabilities, cryptographic technologies, and evolving standards to identify potential impacts to the VA enterprise and recommend appropriate engineering or modernization actions.
• Support project and lifecycle management activities associated with cryptographic modernization, including requirements development, configuration management, risk tracking, implementation planning, and transition sequencing.
• Core Role Focus
• May require occasional on-site visits

Requirements:

• Minimum of 10 years IT experience of which at least 5 years are of Quantum Computing and Cryptography experience at a large corporation or Government agency similar in size/scope to GSA, IRS, DoD or VA. 
• A Master’s degree in a related IT field may substitute for up to 2 years of the required experience 
• Expertise in quantum mechanics, quantum algorithms (e.g., Shor’s algorithm, Grover’s algorithm), and quantum information theory. 
• Expertise in quantum programming languages and frameworks such as Qiskit (IBM), Cirq (Google), Quipper, and Microsoft Quantum Development Kit  
• Expertise in cryptographic protocols (e.g., RSA, AES) and principles of public-key infrastructure (PKI). 
• Expertise in post-quantum cryptography and quantum-resistant algorithms. 
• Expertise in existing cryptographic standards and frameworks (e.g., NIST, ISO/IEC 19790). 
• Proficiency in programming languages such as Python, C++, and Java for implementing and testing cryptographic algorithms. 
• Expertise with classical and quantum simulation tools. 
• Expertise working with and advising on quantum-resistant algorithm migration plans and post-quantum cryptography (PQC) implementation strategies. Expertise assessing organizational cryptographic inventory and identifying migration priorities. Expertise collaborating with cross-functional teams to communicate quantum risk to non-technical leadership. Experience providing policy and guidance inputs for cryptographic modernization aligned with NIST PQC standards (FIPS 203, 204, 205). 
• Expertise in project management or working in a project-oriented environment, with an understanding of how configuration management fits into the overall project lifecycle within a large corporation and Government agency similar in size/scope to GSA, IRS, DoD or VA. 

Preferred/Desired:

• Bachelor’s degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or related fields. 
• CASP+ (SecurityX), CCISO, CISA, CISM, CISSP, CISSP-ISSAP, CISSP-ISSEP, GCED, GCIH, GSLC, CCNP Security