As worries about quantum computing’s threat to classic cryptography heats up, there’s a rising demand for post-quantum cryptography specialists who will fight back against this negative disruptive potential.
However, experts suggest that’s becoming a problem. There is no single degree for this job, even as demand for the people who can do it is outrunning supply.
Post-quantum cryptography — the discipline of replacing today’s encryption with math that quantum computers cannot break — has gone from an academic curiosity to a hiring priority in less than two years.
Job postings reviewed by career-tracking sites describe roles built around a specific mix of skills, including a solid grounding in mathematics, working knowledge of both classical and quantum-resistant cryptographic algorithms, hands-on programming ability, and increasingly, fluency in the federal standards now driving corporate deadlines.
Listings for the Department of Veterans Affairs and other agencies posted on Indeed ask candidates to show expertise with FIPS 203, 204 and 205 — the technical names for the National Institute of Standards and Technology’s first three finalized post-quantum standards — along with experience testing and migrating systems onto them. According to salary data compiled by ZipRecruiter, pay for roles carrying this title in the U.S. ranges roughly from $42,500 to $75,500 a year at the specialist level, with senior cryptography engineers and researchers commanding considerably more, up to $150,000 or beyond, depending on experience and employer.
For Post-Quantum Cryptography Specialist, The Math Comes First
Cryptography, post-quantum or otherwise, is essentially applied mathematics.
The algorithms NIST has standardized — ML-KEM for exchanging encryption keys and ML-DSA for digital signatures, both finalized in August 2024 — are built on a branch of math called lattice theory, which studies the properties of points arranged in repeating grid patterns across many dimensions. A third standard, SLH-DSA, relies instead on hash functions, a different mathematical tool that scrambles data in a one-way process that is easy to run forward but effectively impossible to reverse.
A career guide published by the career site 3university.io describes cryptographic engineering as requiring an understanding of “both the math and the performance constraints of real systems” — meaning a specialist needs to grasp not just why an algorithm is secure, but why it runs faster or slower, and produces bigger or smaller outputs, than the encryption it replaces.
It appears that a post-quantum cryptography specialist doesn’t need a doctorate to start. Recruiting site Quantum Jobs USA reports that most entry-level positions require only a bachelor’s degree in computer science, mathematics or a related field, reserving master’s and doctoral requirements for research-heavy roles. Free coursework in linear algebra, abstract algebra and number theory — available through MIT’s OpenCourseWare project, which posts full university course materials online at no cost — can substitute for a second degree for someone building this foundation independently.
Understanding the Threat, Not Just the Fix
A post-quantum cryptography specialist also has to explain, credibly, what’s being defended against. That means understanding Shor’s algorithm, the quantum-computing method that threatens to break RSA and elliptic-curve encryption — the two systems securing most of today’s internet traffic — and Grover’s algorithm, a separate quantum method that weakens, but doesn’t break, symmetric encryption such as AES.
It also means understanding “harvest now, decrypt later,” the strategy in which adversaries collect encrypted data today and store it, waiting for a quantum computer capable of unlocking it later. None of this requires building a quantum computer. It requires knowing enough about how one works to explain the urgency to a chief financial officer who has never heard of a qubit.
The Unglamorous Work of The Post-Quantum Cryptography Specialist
The largest share of current job openings, according to postings tracked across job boards, sit not in research but in migration. Specifically, these tasks deal with identifying where an organization’s cryptography actually lives — inside web encryption protocols, virtual private networks, hardware security modules, certificate systems — and planning the changeover.
That work requires fluency in public key infrastructure, the system of digital certificates that lets computers verify each other’s identity, and in TLS, the protocol that secures most web traffic. It also requires comfort with “hybrid” cryptography, which runs classical and post-quantum algorithms together during the transition so that both would need to be broken to compromise a system.
Programming ability matters, too, with postings reviewed by Quantum Jobs List calling for proficiency in C, C++ or Python, the languages most cryptographic libraries are written in.
Becoming a Post-Quantum Cryptography Specialist for Free or Nearly Free
Fortunately, free and inexpensive sources can — at the very least — help workers start their career journey.
The clearest low-cost entry point is a six-week course, “Introduction to Post-Quantum Cryptography,” offered free through edX by the University System of Maryland, which covers classical encryption, quantum computing basics and PQC migration strategy without requiring prior cryptography experience.
IBM offers a free, self-paced course with hands-on Python labs covering hash functions, symmetric and asymmetric cryptography and quantum-safe methods; completing it and passing the exam earns a digital badge through Credly, a credential that carries some weight given IBM’s role developing two of NIST’s three finalized algorithms.
Delft University of Technology offers a five-module course on quantum-safe infrastructure through its own online platform. For a broader survey, the course-aggregator Class Central catalogs more than 500 post-quantum-related courses, lectures and conference talks, many free, from providers worldwide.
For hands-on practice rather than lecture-watching, the Open Quantum Safe project — an open-source software library called liboqs — lets learners experiment with implementing NIST-standardized algorithms directly in code, free of charge, and is referenced by multiple job postings as a tool candidates are expected to know.
On the credentialing side, foundational, low-cost certifications such as CompTIA Security+ or (ISC)²’s Certified in Cybersecurity — both priced well under $500 — establish the general security background employers expect before layering on post-quantum-specific knowledge; NIST’s own standards documents, freely published, remain the primary reference material once that foundation is in place.
None of these credentials, alone, constitutes a finished specialist. But together, they describe a realistic, mostly self-funded path — math fundamentals, a structured PQC course, hands-on coding practice and a general security certification — into a field where, by every available account, employers are still struggling to find enough qualified people to hire.
