Technical Advisor - Cybersecurity

A. Background

About GIZ

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH is the German development agency and provides global services in the field of international cooperation for sustainable development. As a public-benefit federal enterprise, GIZ is commissioned by the German Government and collaborates with public and private sector partners in around 120 countries in achieving their objectives in international development cooperation.

About the Postquantum Cryptography Project

Much of today’s digital economy relies on encryption to protect personal, commercial, and government information. Advances in quantum computing could eventually make some of the cryptographic methods currently used to protect this information vulnerable. The challenge is particularly relevant for information that must remain confidential for many years. Sensitive information intercepted today could potentially be stored and decrypted in future once sufficiently capable quantum computers become available. Preparing early gives Kenya an opportunity to assess these risks, develop domestic expertise and avoid a costly or rushed transition later.

Funded by the Federal Ministry of Research, Technology and Space (BMFTR), the proposed German–Kenyan initiative seeks to prepare Kenya for the future cybersecurity risks arising from advances in quantum computing, while building a sustainable knowledge and technology partnership between Kenya and Germany. The project will work primarily with Kenyan academia, research institutions and private sector CII operators to establish a Quantum Safe Cryptography (QSC) testing environment, undertake selected industry pilots, develop specialized skills and generate practical guidance for Kenya’s future transition to Post Quantum Cryptography (PQC).

The initiative will be implemented by GIZ Kenya via the Digital Transformation Centre Kenya II.

B. Responsibilities

• Provide technical advisory support for implementation of the project’s post quantum cryptography, cybersecurity and critical infrastructure protection activities.
  
• Support the design, establishment and operation of the Quantum Safe Cryptography Lab, including testing environments.
  
• Support the development and testing of classical, hybrid and post quantum cryptographic configurations, including interoperability, performance, security and migration testing.
  
• Monitor relevant international standards and guidance, particularly from NIST, BSI, ENISA, ETSI and other relevant standardisation bodies, and translate developments into practical recommendations for the Kenyan context.
  
• Design and deliver technical capacity-building activities, including practical trainings, laboratory exercises, workshops and training-of-trainers for cybersecurity practitioners, researchers and infrastructure operators.
  
• Advise project partners on the integration of PQC migration into broader cybersecurity risk management, data protection, digital identity and critical information infrastructure security frameworks.
  
• Support technical quality assurance of consultants, subcontractors and technology partners and review technical deliverables against agreed security and interoperability requirements.
  
• Contribute technical expertise to stakeholder consultations, project reporting and engagement with Kenyan, German and European cybersecurity institutions and industry partners.
  
• Ensure close coordination with the Component Lead and other project advisors so that technical activities remain aligned with project objectives, policy priorities and BMFTR/ GIZ implementation requirements.
  

C. Required qualifications, competences and experience

Qualifications

• Completed university degree in computer science, cybersecurity, information security, software engineering, telecommunications, electrical/electronic engineering or a comparable technical discipline, preferably with a focus on cybersecurity, cryptography or secure digital systems.
  

Professional experience

• At least 3 years of professional experience in cybersecurity, information security, cryptography or critical infrastructure protection, preferably in complex public-sector or international cooperation environments.
  
• Practical experience with cryptographic systems and protocols, including PKI, TLS, VPN/IPsec, digital certificates, code signing, and key management.
  
• Experience in cybersecurity risk assessments, security architecture reviews, vulnerability management, or security testing.
  
• Familiarity with post-quantum cryptography, crypto agility, and cryptographic migration planning is highly desirable.
  
• Experience working with critical infrastructure operators, government institutions, research organisations or technology providers.
  
• Proven experience supporting technical pilots, laboratories, testbeds, or proof of concept implementations.
  
• Experience in technical project management, including the preparation of technical specifications, coordination of service providers, and quality assurance of technical deliverables.
  

Other knowledge and additional competences

• Strong understanding of cybersecurity architecture, cryptographic lifecycle management, and emerging quantum-related security risks.
  
• Ability to translate complex technical issues into clear recommendations for non technical decision makers and policy stakeholders.
  
• Knowledge of data protection, critical information infrastructure protection and digital governance is an advantage.
  
• Strong communication, facilitation and stakeholder-management skills across government, academia, private sector and international partners.
  
• Ability to work effectively in multidisciplinary and intercultural teams and coordinate with both technical and policy experts.
  
• High degree of initiative, reliability, problem solving ability and attention to technical detail.
  
• Strong documentation and reporting skills, including preparation of technical notes, test reports, guidelines and recommendations.
  
• Business fluent English required.
  

Assignment Details

Duty Station: Nairobi

Duration: 01/01/2027 - 31.12.2028

Vacancy Reference Number: GIZ/SED/04/11/2026

Equal Employment Opportunity

GIZ Kenya is committed to fostering a diverse, inclusive, and respectful workplace. We provide equal employment opportunities to all and do not tolerate discrimination based on race, colour, ancestry, religion, age, gender, sexual orientation, ethnic origin, disability, marital status, or any other protected status.

Ethics

GIZ is committed to safeguarding the safety, dignity, and well-being of staff, partners, community members, and programme participants. Sexual exploitation, abuse, harassment, child abuse, and all forms of misconduct are strictly prohibited. Staff are expected to uphold high ethical standards, comply with local laws, and complete mandatory ethics training upon engagement.

Data Confidentiality

Candidate applications will be retained for six (6) months in accordance with GIZ's data protection policy and deleted thereafter.

Only shortlisted candidates will be contacted.