Engineer - Classical Cryptography & Architecture

Job Description

Job Title: Principal Engineer - Classical Cryptography & Architecture. Location: Geneva, Switzerland (Onsite)

Responsibilities:

Classical Cryptography Architecture

• Own the architecture and implementation strategy for classical cryptographic functions across the product line.

• Design and guide implementation of symmetric ciphers and modes, including AES/GCM and related technologies.

• Define hash functions and constructions, including SHA-2, SHA-3, HMAC, and key derivation functions (KDFs).

• Oversee RSA and ECC cryptographic offload;

• Define true random number generation and entropy architecture based on NIST SP 800-90A/B/C.

• Guide RTL and software engineers implementing classical cryptographic cores.

• Evaluate third-party intellectual property (IP) for technical suitability.

Hybrid Classical and Post-Quantum Cryptography

• Define hybrid classical and post-quantum cryptographic schemes.

• Design key establishment, dual-signature, and composite-certificate approaches.

• Work with PQC architects on hybrid and composite standards.
• Track relevant NIST guidance and IETF standardization work, including:
  • Hybrid key establishment in TLS 1.3
  • Hybrid key establishment in IKEv2
  • Composite certificates

• Define crypto-agility mechanisms that allow customers to migrate safely to quantum-safe systems.

• Ensure hybrid solutions work with existing security infrastructure.

Key Management and Certification

• Own key-management and key-hierarchy architecture across the product line.

• Ensure interoperability with deployed HSM, TLS, and IPsec ecosystems.

• Support FIPS 140-3 and CAVP certification of the classical algorithm suite.

• Make architecture decisions that balance security, interoperability, and real-world deployment requirements.

Qualifications:

• Master's or PhD in Cryptography, Computer Science, Electrical Engineering, or a related field.

• At least 12 years of experience implementing and architecting classical cryptography in real products, covering hardware, software, or both.

• Deep understanding of symmetric and asymmetric cryptographic primitives.

• Strong knowledge of cryptographic modes of operation, key management, and entropy generation.

• Experience taking cryptographic subsystems through FIPS 140-3 or Common Criteria evaluation.
• Working knowledge of NIST post-quantum algorithms, including:
  • ML-KEM
  • ML-DSA
  • SLH-DSA

• Ability to design hybrid cryptographic schemes in collaboration with post-quantum cryptography specialists.

• Understanding of deployed security infrastructure, including HSMs, PKI, TLS, and IPsec;

• Knowledge of how hybrid classical and post-quantum cryptographic schemes are standardized and deployed.

• Ability to write precise technical specifications and guide engineering teams.

• Strong architecture decision-making skills, particularly when working with real-world interoperability constraints.

• Fluency in English.

Preferred:

• French or German language skills are an advantage.

• The ideal candidate takes responsibility for the correctness and interoperability of classical cryptographic systems and understands the importance of reliable migration to quantum-safe security.

Benefits:

IonQ offers:

• Competitive compensation.

• Equity plan.

• Flexible work models.

• Ongoing training and professional development.

• Career development opportunities within the IonQ group.

• Collaboration with an international team of experts.

• A performance-driven work environment built on trust and teamwork.

• Medical, dental, and vision plans.

• Matching 401(k).

• Unlimited paid time off and paid holidays.

• Parental and adoption leave.

• Legal insurance.

• Home technology stipend.

Participation details will be provided when a candidate receives an offer.

Application Instructions:

Apply through IonQ's official careers portal.

The application requires:

• First and last name.

• Preferred first name.

• Email address and phone number.

• Country and city of residence.

• Resume or CV.

• LinkedIn profile.

• Current work authorization information.

• Whether visa sponsorship will be required.

• Third-country national status;

• Citizenship or location information for specified countries.

• Applicant privacy notice and data consent.

• Background check disclosure and consent.

A cover letter and personal website are optional.

Additional Information:

• This position is based onsite in Geneva, Switzerland.

• IonQ is an equal opportunity employer.

• Pre-employment screening may include identity, employment history, education, sanctions and watchlists, adverse media, public records, and criminal or court records where legally permitted.

• Candidate data may be processed internationally, including in the United States and Switzerland, with applicable data-transfer safeguards.

• Background screening is conducted through a third-party provider. Providing information and consent is voluntary, but failure to provide required information or consent may prevent employment from starting or continuing.