Enterprise PKI engineering, post-quantum cryptography, and certificate lifecycle automation for defense-grade and commercial environments.
End-to-end cryptographic infrastructure for enterprises, federal contractors, and defense industrial base organizations.
Multi-tier CA hierarchies, SCEP/EST/ACME enrollment, certificate lifecycle automation, and cross-realm trust federation.
NIST FIPS 203/204/205 implementation, hybrid composite certificate issuance, and PQC readiness assessment for your organization.
Controls mapping, evidence collection, gap analysis, and continuous compliance monitoring for Defense Industrial Base contractors.
Certificate-based device enrollment, YubiKey attestation, Apple MDM/declarative management, and Microsoft Intune SCEP integration.
Cloud-native and hybrid PKI deployments on Azure, HashiCorp Vault multi-tenant architectures, and CI/CD certificate pipeline automation.
YubiKey deployment and attestation verification, HSM integration, smart card enrollment, and FIDO2/WebAuthn implementation.
A family of 20 hybrid composite certificate profiles combining classical and post-quantum algorithms, submitted to the IETF PQC Hackathon and aligned with NIST FIPS 203/204/205.
The Cygnus composite family provides cryptographic agility during the transition to post-quantum cryptography. Each profile pairs a classical algorithm (ECDSA P-256/P-384, RSA 3072, Ed25519, X25519) with a NIST-standardized PQC algorithm (ML-DSA, ML-KEM, SLH-DSA), ensuring forward compatibility while maintaining backward interoperability with existing X.509 infrastructure.
Sanctum SecOps LLC is an active participant in multiple Microsoft partner programs, enabling enterprise-grade Azure integration and ISV co-sell capabilities.
Active contributions to IETF working groups advancing post-quantum cryptography standards, PKI observability, and authorization mechanisms.
Sanctum SecOps LLC holds active federal registrations, intellectual property filings, and standards body assignments.
Security infrastructure architect specializing in PKI, post-quantum cryptography, and enterprise certificate lifecycle automation. IETF contributor and author of the Cygnus family of composite post-quantum certificates. Based in Pine City, New York.
PKI architecture, post-quantum migration, CMMC compliance, or Azure cryptographic infrastructure — let's talk.
bvicente@sanctumsecops.com