This role pays more than
66%
of similar roles. Most pay
$142,475–$209,625
— the shaded band above.
At the midpoint, this role pays about
$203k
versus about
$176k
for comparable roles.
Based on 240 similar postings.
Employer
About Dell Technologies
Dell Technologies is a US-based technology company that designs and sells PCs, servers, storage and networking hardware, along with related software and IT services. Its product lines include the XPS, Latitude and Alienware PCs and the PowerEdge server and PowerStore storage families.
Dell Technologies currently has
73 open roles
on FindRole.
Listed pay typically runs
$164,025–$225,750
across 64 roles with salary data.
Consultant, Cryptography Security Architect joins the Enterprise Security Architecture team to establish the architectural vision for enterprise cryptographic infrastructure. This role involves designing, governing, and evolving systems including HSM platforms, certificate authorities, and key management services across on-premises, cloud, and customer-facing environments. The architect will lead Post-Quantum Cryptography readiness by tracking standards and developing migration roadmaps while authoring governance frameworks for algorithms, protocols, and PKI trust models. Key responsibilities include managing multi-year transformation programs, performing build-vs-buy analyses, and overseeing vendor relationships. Technical expertise required includes HSM architecture, certificate lifecycle management, and API-first service design using protocols such as KMIP, PKCS#11, EST, and ACME. The role addresses the challenge of ensuring operational resilience and crypto-agility while translating complex regulatory requirements like FIPS, FedRAMP, and PCI DSS into actionable guidance for engineering teams.
Design and govern enterprise cryptographic infrastructure including HSM platforms, certificate authorities, and key management services.
Lead the organization's Post-Quantum Cryptography (PQC) readiness by tracking standards and creating migration roadmaps.
Author and enforce enterprise cryptographic standards and governance frameworks for algorithms, protocols, and PKI trust models.
Translate complex regulatory requirements like FIPS and FedRAMP into actionable guidance for engineering teams.
Manage multi-year cryptographic transformation programs including vendor consolidation and cost/effort analysis.
Architect API-first cryptographic services to ensure backend portability and eliminate vendor lock-in.
Manage strategic relationships with HSM manufacturers, CA providers, and key management vendors.
What we're looking for
Deep expertise in enterprise HSM platforms to design multi-vendor strategies balancing risk, procurement agility, and operational readiness.
Proven ability to architect and govern large-scale certificate ecosystems across public/private CAs, CLM platforms, and API abstraction layers.
Strong knowledge of EKM platforms, cloud key management, and database encryption methodologies for enterprise consumption.
Working understanding of PQC standards, hybrid approaches, and hardware to lead cross-business-unit PQC readiness and crypto-agility.
Mastery of cryptographic primitives, algorithms, protocols, and PKI trust models to author and enforce enterprise standards.
7+ years of experience operating and governing large-scale cryptographic infrastructure across complex hybrid multi-cloud environments.
Demonstrated success leading multi-year, large enterprise security transformation programs with executive-level reporting.
Experience in regulated environments including FedRAMP, FIPS, and PCI DSS (preferred); experience designing API-first security services using KMIP, PKCS#11, EST, or ACME (preferred).
Post-Quantum Cryptography
Python
Rust
C++
PKI
Cloud Architecture
Key Management
Linux
Windows
SATCOM
Trusted Compute
Digital Forensics
Penetration Testing
Cybersecurity Risk Management
Information Assurance
Secure Software Development
Network Protocols
Systems Engineering
AWS
Microsoft Azure
Google Cloud Platform
Kubernetes
Containers
Identity and Access Management
Network Security
Data Protection
Encryption
DevSecOps
CI/CD
Infrastructure as Code
Zero Trust
SaaS
Cloud-Native Architecture
Security Automation
Post-Quantum Cryptography
Quantum Computing
Cryptography
Python
C++
Java
Qiskit
Cirq
Quipper
Microsoft Quantum Development Kit
PKI
RSA
AES
NIST Frameworks
Zero Trust
FIPS 203
FIPS 204
FIPS 205
DevSecOps
Key Management