When you a looking for a job as a PQC expert, you may find there is no accredited degree in post-quantum cryptography. There is no single certifying body, no decades-long professional track record to point to, and no consensus yet on what a résumé for the job should even look like. And yet companies are hiring for it now — banks, telecoms, cloud providers, defense contractors, and a growing roster of specialist vendors are all trying to fill roles with titles like “PQC engineer,” “cryptographic migration lead,” and “quantum risk architect.”
That mismatch — real hiring demand against an undefined qualification path — is the central fact anyone considering this field needs to understand. To find a job as a PQC expert, it’s important to know what’s actually driving the demand, what employers say they’re looking for, and how people from adjacent fields are making their case for these roles.
Post-quantum cryptography refers to encryption algorithms designed to withstand attacks from a sufficiently powerful quantum computer, which could theoretically break the math underlying RSA and elliptic-curve cryptography that secures most of today’s internet traffic, banking systems, and government communications. In 2024, the U.S. National Institute of Standards and Technology (NIST) finalized its first three quantum-resistant standards: ML-KEM (formerly CRYSTALS-Kyber) for encryption, ML-DSA (formerly CRYSTALS-Dilithium) for digital signatures, and SLH-DSA (formerly SPHINCS+) as a backup signature scheme.
That finalization turned an academic problem into an operational one. No one has publicly demonstrated a quantum computer capable of breaking current encryption. But security teams are increasingly concerned about “harvest now, decrypt later” attacks, in which adversaries capture and store encrypted data today with the intent of decrypting it once quantum computing matures — a real risk for any data with a long shelf life, such as medical records, state secrets, or financial history. By the first quarter of 2026, the Cybersecurity and Infrastructure Security Agency reported that roughly 38% of Fortune 500 firms had completed at least a partial cryptographic inventory, up from 12% in late 2024. Federal guidance is pushing in the same direction, with agencies working against migration deadlines set out in earlier White House and OMB memoranda.
That timeline is why hiring has started well ahead of any settled credentialing system. Organizations don’t have the luxury of waiting for universities to produce graduates with “PQC” on their diploma.
What Employers are Actually Asking For
Postings for a job as a PQC expert tend to blend three things: traditional cryptography and security fundamentals, hands-on migration experience, and familiarity with the new standards. Common requirements include a strong foundation in existing cryptography (RSA, ECC, AES), an understanding of lattice-based or hash-based cryptographic schemes, proficiency in C, C++, or Python, and familiarity with NIST’s post-quantum standards. Government and enterprise postings frequently also ask for knowledge of standards such as FIPS 140-3, NIST SP 800-175B, and related guidance, along with hands-on experience with tools like Open Quantum Safe, cloud key-management systems with PQC extensions, and general cybersecurity certifications such as CISSP or Security+.
One thing to note: a physics or quantum-computing background is not typically required for a job as a PQC expert. Engineering and implementation roles usually call for a bachelor’s or master’s degree in computer science, mathematics, or cybersecurity, while research roles developing new quantum-resistant algorithms are more likely to require a PhD. Both levels are recruited by government and defense contractors, but most day-to-day PQC hiring is implementation work, not algorithm design.
Translating Adjacent Experience
Because a job as a PQC expert is a genuinely new specialty, most people entering it are reframing existing expertise rather than starting from zero. A few translation paths show up repeatedly:
- Security engineers and architects can point to experience with TLS, key management, PKI, or HSMs — the exact infrastructure now being retrofitted for hybrid classical/post-quantum handshakes.
- Software and systems engineers, particularly those comfortable in C, C++, or Python and embedded environments, are well positioned for implementation and performance-benchmarking roles, since swapping cryptographic primitives into existing codebases is much of the actual work.
- Compliance and risk professionals with experience running audits or asset inventories can frame that background as directly applicable to cryptographic discovery — the unglamorous but essential first step of finding out where an organization’s vulnerable cryptography actually lives.
- Academics and researchers in number theory, coding theory, or lattice-based mathematics have a more direct route into research-track roles, though these are a minority of current openings.
For all of these paths, the honest move is not to overstate quantum expertise but to be specific about which piece of the migration — inventory, protocol implementation, testing, or policy — matches one’s actual background, and to be candid about what’s new to learn.
Where You Might Find a Job as a PQC Expert
Demand clusters around a few distinct types of employer, each with a different flavor of work:
- Internal security teams at banks, telecoms, healthcare systems, and large enterprises, tasked with inventorying and migrating their own infrastructure.
- Cloud and infrastructure providers — AWS, Microsoft, Google, and Cloudflare among them — who are rolling out post-quantum defaults at the platform level, shifting much of the burden away from their customers but creating substantial internal engineering demand.
- Specialist PQC vendors and consultancies, including firms like PQShield, SandboxAQ, ISARA, and evolutionQ, which sell crypto-agility tooling, cryptographic inventory platforms, and migration advisory services.
- Government and defense contractors, where PQC work is tied to federal mandates and where security clearances and on-site work are more common than in the private sector.
- Academic and national-lab research groups, focused on algorithm development rather than deployment.
Building The Qualifications
Given the absence of a formal degree track, most people build credibility through a mix of self-study, applied projects, and existing security certifications rather than a single credential. Useful starting points include NIST’s own migration guidance — the Special Publication 1800-38 series on cryptographic discovery, preparation, and testing — along with sector-specific guidance such as the GSMA’s telecom-focused PQC guidelines and the German BSI’s technical recommendations on quantum-safe cryptography. The open-source Open Quantum Safe project offers a hands-on way to work directly with the new algorithms in code rather than only in theory. General coursework in quantum information science, available through platforms like Coursera and edX, can round out the conceptual background, though it is not a substitute for hands-on implementation experience with the NIST-approved algorithms themselves.
Salaries and job titles in this space remain unsettled and vary widely by employer type. ZipRecruiter data from July 2026 put average U.S. pay for post-quantum cryptography roles at roughly $63,500 annually, with most workers earning between $42,500 and $75,500 — figures that likely understate senior engineering and research roles at large tech firms or defense contractors, where compensation follows standard senior-security-engineer bands. As with any emerging specialty, job titles are inconsistent across employers, and the field’s qualifications will likely formalize considerably over the next several years. Anyone entering it now is, to a real extent, helping define what the job becomes — which is as much a reason for caution as it is an opportunity.
