Quantum Computing / Cryptography Engineer

Description

Quantum Computing / Cryptography Engineer

Department of Veterans Affairs Office of Information Security COSE Support

Position: Full-Time / Remote from Contractor Facility
Primary Work Location: Contractor facility within the United States; occasional coordinated support at VA Central Office, 811 Vermont Street NW, Washington, D.C.

JOIN OUR TEAM!

Caladwich is seeking a highly motivated, detail-oriented Quantum Computing / Cryptography Engineer to support the Department of Veterans Affairs Office of Information Security Cybersecurity Operations and Security Engineering (COSE) program. The selected professional will provide specialized engineering support for cryptography, post-quantum readiness, and quantum-computing risk across VA. This role assesses the current cryptographic environment and develops practical migration strategies aligned with Federal standards.

This position offers the opportunity to contribute directly to the modernization and resilience of VA cryptographic capabilities as quantum threats and Federal requirements evolve. The engineer helps identify vulnerable dependencies, prioritize remediation, and guide adoption of NIST-approved post-quantum algorithms.

WHO WE ARE:

Caladwich is a U.S.-based Service-Disabled Veteran-Owned Small Business (SDVOSB) and SBA 8(a) certified company providing professional services and mission support solutions to federal agencies worldwide. Our capabilities include Acquisition Support, Program Management, Logistics Support Services, Process Improvement, Asset Management, and Operational Support Services for DoD, DHS, VA, and GSA customers.

As a Veteran-owned company, our mission remains steadfast: Integrity. Solutions. Results.

Core Responsibilities 

· Assess VA cryptographic implementations, protocols, algorithms, certificates, keys, libraries, dependencies, hardware, applications, and data flows.

· Develop and maintain a cryptographic inventory and identify non-compliant, legacy, deprecated, or quantum-vulnerable mechanisms.

· Define risk-based migration strategies, technical requirements, priorities, timelines, dependencies, interim mitigations, and validation methods.

· Advise on post-quantum cryptography implementation and migration aligned with NIST standards, including FIPS 203, FIPS 204, and FIPS 205.

· Apply knowledge of quantum mechanics, quantum information theory, Shor's and Grover's algorithms, and quantum-resistant cryptographic design.

· Use quantum programming and simulation frameworks such as Qiskit, Cirq, Quipper, and Microsoft Quantum Development Kit.

· Design, implement, and test cryptographic algorithms and prototypes using languages such as Python, C++, and Java.

· Evaluate RSA, AES, PKI, key management, FIPS 140-2/3, NIST, ISO/IEC 19790, and related cryptographic standards and controls.

· Communicate quantum risk, migration choices, and modernization priorities to technical teams and non-technical leadership.

Operational Support 

· Coordinate with VA stakeholders, technical teams, system owners, and other contractors to resolve issues and keep work aligned with VA priorities.

· Develop, maintain, and submit accurate technical documentation, status information, and contract deliverables within required timeframes.

· Apply VA security, privacy, accessibility, records-management, and configuration-management requirements to all work products.

· Support risk, issue, dependency, schedule, and quality management activities, including corrective actions and continuous improvement.

· Protect VA information and systems, use approved collaboration and remote-access methods, and promptly report security or privacy concerns.

· Participate in meetings, reviews, briefings, and occasional travel as directed and approved under the task order.

· Coordinate cryptographic discovery and remediation with system owners, architects, developers, infrastructure teams, security staff, and vendors.

· Define metrics and reporting mechanisms to track migration progress, risk reduction, standards alignment, and milestone completion.

Requirements

Required Qualifications 

· Minimum 10 years of IT experience, including at least five years of Quantum Computing and Cryptography experience at a large corporation or Government agency similar in size and scope to GSA, IRS, DoD, or VA.

· Expertise in quantum mechanics, quantum algorithms, quantum information theory, quantum programming frameworks, cryptographic protocols, PKI, post-quantum cryptography, and quantum-resistant algorithms.

· Expertise with NIST and ISO/IEC cryptographic standards; proficiency in Python, C++, and Java; and experience with classical and quantum simulation tools.

· Experience advising on PQC migration, assessing cryptographic inventories, setting migration priorities, communicating quantum risk, and providing policy and guidance inputs aligned with FIPS 203, 204, and 205.

· Bachelor's degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or a related field.

· Certification in one or more of the following: IAT III, IAM III, or IASAE III.

· PWS substitution: a Master's degree in a related IT field may substitute for up to two years of required experience. IAT III, IAM III, or IASAE III certification may substitute for a relevant Bachelor's degree or four years of relevant experience.

Other Requirements 

· Must be able to read, write, speak, and understand the English language.

· Must successfully complete and maintain the VA personnel vetting and background investigation requirements applicable to assigned work; PWS Tasks 5.1 through 5.9 are designated Tier 4 / High Risk.

· Must complete required fingerprinting, personnel security forms, security and privacy training, and Rules of Behavior acknowledgments within Government-established timelines.

· Must qualify for and properly safeguard any required VA Personal Identity Verification (PIV) credential and Government-furnished equipment.

· Must be available and responsive during core hours of 8:00 a.m. to 5:00 p.m. Eastern Time on normal Federal Government workdays.

· Must be able to work from a Contractor-provided facility and travel occasionally to VA Central Office in Washington, D.C., or other approved locations when coordinated in advance.

· Remote access to VA systems must occur only through VA-approved methods and from locations permitted by VA policy.