Quantum Cryptography Architect

• Join the Security Architecture team, which guides and empowers teams across Security and the wider technology landscape. • Cover end-to-end security architecture across a modern tech stack, with a strategic focus on cryptography and post-quantum readiness. • Own the strategic design of cloud-native and on-premise cryptography roadmaps as quantum computing capabilities evolve. • Conduct cryptographic assessments, drive crypto-agility, and define the technical roadmap that keeps Starling resilient against emerging threats. • Take a hands-on approach, designing and building proof of concept solutions for engineers to refine or draw inspiration from. • Serve as a trusted advisor within a growing Security Architecture team. • Work in a flat structure that empowers you to make decisions regardless of your primary responsibilities. • Work hybrid from London, attending the office a minimum of one day per week.

• Show a proven track record as an Information Security Architect or in a senior security engineering role designing secure, distributed systems in AWS or GCP. • Bring comprehensive practical and theoretical knowledge of symmetric and asymmetric cryptography, PKI management, digital signatures, key management systems, and HSMs. • Bring a strong understanding of quantum computing threats to modern encryption, NIST PQC standards, hybrid key exchange, and strategies for crypto-agility. • Perform threat modelling on complex cloud-native applications, APIs, and microservices architectures such as Kubernetes and ECS. • Design security controls that minimise developer friction, on the view that security should enable engineering speed. • Communicate excellently in writing and in person, distilling complex cryptographic risks into clear guidance for technical teams and senior leadership.

• Bring experience in fintech, banking, or highly regulated cloud environments covering PCI-DSS, ISO 27001, or NIST guidelines. • Bring a background in a highly technical role such as security engineering, infrastructure engineering, or penetration testing. • Bring experience across infrastructure, application, and AI security, including container security, secure code reviews, and secure integration of generative AI and ML. • Bring practical experience applying the SABSA framework to business-driven, risk-aligned enterprise security architectures. • Hold recognised certifications such as SABSA, CISSP, AWS Security Specialty, or specialised cryptography credentials. • Apply even if you do not tick every box, as Starling encourages people to get in touch anyway.

• Take ownership of Starling’s Post-Quantum Cryptography initiative, designing the crypto-inventory, evaluating PQC algorithms, and building architectures for cryptographic agility. • Act as cryptography subject matter expert, guiding on PKI, HSMs, key management, service mesh security, and transport layer protocols across cloud environments. • Architect secure, scalable solutions across AWS and GCP, turning complex requirements into pragmatic design patterns for engineering teams. • Lead secure design reviews and threat modelling initiatives, delivering actionable guidance to Engineering. • Design and build proof of concept solutions where suitable. • Review RFCs and ADRs with software engineers, cloud architects, and security operations to embed security into the development lifecycle without friction. • Define, document, and promote enterprise cryptographic management standards covering key lifecycle, hardware security, and modern cipher suites. • Mentor engineering teams on cryptographic implementations, secrets management, and data protection at rest and in transit. • Support the wider Security Architecture team with day-to-day advisory work.

• Take 25 days holiday plus your public holiday allowance whenever works best for you. • Take an extra day’s holiday for your birthday, with annual leave increasing with length of service and the option to buy or sell up to five days. • Take 16 hours of paid volunteering time a year. • Join a salary sacrifice, company enhanced pension scheme. • Get life insurance at four times salary plus group income protection. • Access private medical insurance with VitalityHealth including mental health support and cancer care, with partner discounts at Waitrose, Mr&Mrs Smith, and Peloton. • Benefit from generous family-friendly policies. • Use Perkbox membership for retail discounts and a wellness platform covering physical and mental health. • Access Cycle to Work, salary sacrificed gym partnerships, and electric vehicle leasing. • Own a multi-year post-quantum programme at a bank rather than advising on one from outside.

Starling is the UK’s first and leading digital bank, with a vision of fast technology, fair service, and honest values, all at the tap of a phone. It gives customers a new way to spend, save, and manage their money while taking better care of the planet, and has become a multi-award winning bank employing over 3,000 people across offices in London, Cardiff, Dublin, Southampton, and Manchester. Since starting in 2014 it has surpassed 3.5 million accounts and 350,000 business customers. It is a fully licensed UK bank but a tech-first company at heart, with its own platform delivering its products.