Establishment of a List of External Experts in Post-Quantum Cryptography (PQC)

Applicants must satisfy the following eligibility requirements: 1. be a natural person; 2. be a national of a Member State of the European Union, or of a country eligible under the applicable legal framework governing the relevant ECCC activity, where appropriate; 3. have full rights as a citizen; 4. have fulfilled any obligations imposed by the applicable laws concerning military service; 5. meet the character requirements for the duties involved.

Possess excellent command of English, both written and spoken, sufficient for participation in technical evaluations and drafting of expert opinions. Where the nature of the assignment so requires, the ECCC may further limit the use of experts to persons established in, or nationals of, eligible European countries, in particular where sensitive or restricted information is involved.

A university degree of at least three years attested by a diploma in a relevant field, such as: cryptography, cybersecurity, computer science, mathematics, electrical engineering, telecommunications, or another equivalent technical discipline. An advanced degree (Master's or PhD) in a relevant area, especially in cryptography, cybersecurity or a closely related field, will be considered an advantage.

Applicants should have at least five years of professional experience in a field relevant to this call after the award of the diploma giving access to the expert role. Stronger consideration may be given to applicants with ten years or more of relevant experience. Relevant professional experience may include work in: cryptographic research; cybersecurity engineering; design or evaluation of cryptographic protocols and implementations; security testing and validation; standardisation; technical assessment of security products or infrastructures; advisory work on PQC adoption or migration.

Applicants should demonstrate significant expertise in post-quantum cryptography and/or closely related applied cryptographic areas. In particular, evidence of expertise in several of the following will be considered: PQC algorithms, standards and implementation considerations; cryptographic migration and crypto-agility; hybrid schemes and transition architectures; testing and benchmarking of cryptographic solutions; evaluation of PQC in communication systems, software, hardware, embedded systems or critical infrastructures; security analysis of cryptographic implementations; side-channel, implementation or integration risks; QRNG-related technologies; interoperability and validation methodologies.

Experience in one or more of the following will be considered an asset: evaluation of public procurement tenders; evaluation of research or innovation proposals; participation in technical review boards, certification, conformity assessment or standardisation groups; drafting of independent expert reports or technical opinions; assessment of large-scale cybersecurity infrastructures or testing facilities.