Teams at Iron Bow Technologies

Serves as the post-quantum cryptography subject-matter expert for a VA migration from quantum-vulnerable algorithms. Responsibilities include assessing HSMs, PKI, KMS platforms, middleware, and applications; developing migration roadmaps and crypto-agility plans; testing ML-KEM, ML-DSA, SLH-DSA, and hybrid implementations; validating cryptographic modules; maintaining CBOMs; and supporting phased PQC adoption aligned with NIST and CNSA 2.0 guidance.

Lead federal and VA cybersecurity compliance activities for HSM and post-quantum cryptography environments. Support RMF, ATO preparation and renewal, continuous monitoring, FIPS 140-3 and CMVP evidence, vulnerability and patch compliance, security reviews, incident response, and authorization documentation. Translate technical HSM, PKI, and cryptographic configurations into compliance artifacts and coordinate with VA security stakeholders, including ISSOs, OIS, CORs, and program teams. The role is primarily remote with limited customer-site travel.

Administer, monitor, and support the VA’s enterprise HSM managed service. Responsibilities include HSM health and availability monitoring, partition lifecycle management, RBAC, SIEM integration, high availability, disaster recovery, cryptographic key lifecycle operations, key ceremonies, incident response, SLA reporting, documentation, and training. The role is primarily remote with limited customer-site travel and requires maintaining at least 99.9% monthly availability.