Your guide to becoming a cryptographer

What is a cryptographer?

A cryptographer is a skilled cyber security professional that creates encryption codes to protect important data. They play a crucial role in safeguarding sensitive information by creating highly complex and challenging encryption methods to thwart hackers. With a global electronics network as open and interconnected as it is today, it's imperative that we have cyber security professionals like cryptographers to protect information such as e-commerce transactions, cell phone messages and more.

Cryptographers are also often involved in solving encrypted codes, too. However, some people may specialize in one over the other. Those that specialize specifically in breaking or decrypting codes are called cryptanalysts, while cryptographers focus on making codes. To make matters more complicated, while these two titles do have different meanings, both professionals—cryptographers and cryptanalysts—may do both depending on their particular job scope.

What does a cryptographer do?

Cryptographers create complex algorithms and ciphers to encrypt data. At its core, encryption is a way of hiding comprehensible information (called plaintext) by translating it into something unrecognizable (called ciphertext) using a key or code. The key is a mathematical problem that the algorithm uses to convert the plaintext into a ciphertext.

The actual type of information you are protecting via encryption depends on who you work for and your unique job scope, but some specific responsibilities might include:

Ensure that all critical information is protected from being edited, copied or deleted

Analyze data to solve any security issues using mathematical and/or statistical codes

Guarantee data is protected and only available to authorized parties

Keep up to date with current research and strategies for encryption

Improve data security by creating new encryption systems that guard against hackers and other threats

Test existing encryption systems for any vulnerabilities and ensure they are accurate and reliable

Train any and all staff that use encrypted data

Career options for cryptographers

Cryptographers generally have two employment routes: working for the private sector at a business or corporation or in the public sector for a government agency.

Cryptographers working in the private sector for an individual business, company, corporation or something else are focused on protecting that entity's digital integrity and assets specifically, such as an insurance agency, financial institution or university. Most cryptography-focused jobs, however, are in the public sector.

This includes law enforcement, state and federal agencies such as the National Security Agency (NSA).  Specific job responsibilities will change according to your employer. A cryptographer who works for the government, for example, is going to have different expectations than one who works for a major university.

Cryptographers generally have two employment routes: working for the private sector at a business or corporation or working in the public sector for a government agency.

Possible job titles and roles

"Cryptographer" or "cryptanalyst" can indeed be your job title, but the role of the cryptographer may in some cases be incorporated into other positions. This is usually more common when working for a private company. Some of those jobs that may do cryptography include:

Data protection officer:
As a DPO, you'll need to have expert knowledge about data protection laws and practices and all the regulations around them, as well as experience in IT security, security audits, cyber security and threat assessments.
Security architect:
As a cyber security architect, you'll design security systems to thwart malware, hacker intrusions and Denial of Service (DDOS) attacks, and test for any vulnerabilities and audit the entire system.
Computer forensics expert:
You'll investigate and analyze potential evidence in breaches and threats, even when the data has been deleted, encrypted or damaged. Forensics experts need advanced skills to uncover digital traces, conduct deep examinations and provide expert testimony if needed.
Cyber security engineer:
Cyber security engineers design security infrastructure, identify potential threats and fix vulnerabilities that protect the systems.

Educational requirements for cryptographers

There are several different educational paths you can take on the way to becoming a cryptographer. Although there are no specific standards that must be met to pursue this profession, most employers are going to expect cryptographers to have at least a security-related bachelor's degree in a subject such as:

  • Cyber security
  • Computer science
  • Mathematics
  • Computer engineering
  • Information technology

The role of a cryptographer or cryptanalyst is not typically a job people get right out of college. It takes years of experience in the field to develop the knowledge and skills needed to succeed. For this reason, a graduate degree such as a Master of Science (MS) in the aforementioned fields may also be necessary.

For those who wish to teach in academia, focus on cryptographic research, or simply reach the top of their field, a doctorate degree in cryptography, mathematics or a similar subject may be required. 

Cryptographer-Requirement-Final

Work experience required for cryptography

The position and employer you decide on determine what types of work experience are required to be a cryptographer. Some positions may require five or more years of experience and a college degree, while others may accept less in a similar position. In general, cryptographers are not considered an entry-level IT role.

If you are interested in applying to the National Security Agency for example, be prepared to have a strong background in cyber security unless you're specifically applying to a program geared towards current students. It might take a little time and research on your desired place of employment to ensure you are fully prepared before submitting that application for your dream job.

For example, you may need to gain several years of experience in other related IT careers first, such as:

National Security Agency (NSA)

The National Security Agency (NSA) is the mothership for cyber security, cryptology and national intelligence. It protects our government, our citizens and our allies by aiding the armed forces and military operations. 

The NSA can be an excellent place to search for employment, education and/or scholarship opportunities as a budding cryptographer. Future cryptographers and cryptanalysts (and cyber security professionals at large) would be remiss not to check out their offerings to see what they might be able to take advantage of. For example, the NSA's National Cryptologic School (NCS) is a school within the NSA that offers cryptology training at over 20 university campuses, four cryptologic centers and six training schools.

The NSA's Cryptanalysis Development Program (CADP) and Cryptanalytic Computer Operations Development Program (C2DP) are two programs that are particularly relevant for cryptographers and cryptanalysts. They are several years long and prepare people for full-time roles within the agency.

Cryptography skills to acquire

Technical skills are the backbone of a career as a cryptographer. Developing these skills takes years of formal education and on-the-job experience to truly understand and master. The soft skills should not be ignored, however. The synthesis of both technical skills and general professional skills is the key to a successful cryptography career.

Hard skills for cryptographersSoft skills for cryptographers
Understanding of the cryptographic standards and guidelines from the National Institute of Standards and Technology (NIST)Analytical and problem-solving skills
Network security and computer architectureAttention to detail
Fluency in programming languages such as Python, C++ and JavaEffective communication
Knowledge of operating systems such as Windows and LinuxAbility to work independently and as part of a team
Strong mathematical skillsAbility to work under pressure in high stakes scenarios

Professional certifications for cryptographers

Certifications are an essential component of cyber security careers. They substantiate specific knowledge and skills, which is incredibly important in the cyber security field. Certifications act as a signal to employers that you understand certain cyber security concepts and can perform specific tasks related to those domains.

Most certifications are earned by passing an exam administered by the certifying agency (typically a professional organization within the field). In most cases, you have to complete a certain amount of experience in order to qualify for the exam.

There aren't a whole lot of cryptography certifications out there, but there are a few that may be worthwhile for cryptography professionals:

Cryptography courses

There are numerous cyber security organizations that offer online and in-person training courses for professionals seeking to acquire specific skills and knowledge. Although these one-off courses don't award you a certification per se, they can still be a great way to hone your skills and add some micro-credentials to your resume.

Check out some of these course providers that may be helpful as you develop your cryptography career:

  • Infosec Institute offers 10+ different courses on cryptography
  • IBM offers multiple courses on cryptography
  • Skills academies like Coursera, Udemy and edX can act as conduits to take university courses on cryptography without being a student at their school

Cryptographer salary and job growth

The median annual salary for information security specialists is $120,360 according to the 2023 Occupational Employment and Wage Statistics from the U.S. Bureau of Labor Statistics (BLS). Since the BLS does not track salary data for cryptographers specifically, this job title may be the best indication of a cryptographer's earning potential. 

This group of professionals has a wide range of salaries, with the bottom 10% earning $69,210 and the top 10% earning $182,370. Your location, experience level and employer are all factors that can affect your individual earning potential. For example, the states with the highest median annual salary for information security analysts are states of California, Washington, New York, New Hampshire and Maryland.

The job outlook for this group is also incredibly bright: the BLS estimates that employment will grow 31.5% through 2032, compared to just 3% across all occupations. This isn't entirely surprising—as cyber security attacks grow in frequency, society needs more and more qualified professionals to prevent attacks and protect critical information.

Information Security Analysts
hero-widget-desktop-graph hero-widget-desktop-graph

10%$69,210

25%$90,050

50%$120,360Median

75%$153,550

90%$182,370

Median Hourly Wage$58

Job growth31.5%

Total Employment175,350

State Median Salary Bottom 10% Top 10%
Alabama $105,460 $58,130 $164,790
Alaska $104,480 $83,240 $137,060
Arizona $108,440 $65,040 $167,260
Arkansas $91,480 $56,310 $126,590
California $135,250 $63,860 $212,650
Colorado $123,590 $80,150 $181,890
Connecticut $127,390 $84,320 $171,710
Delaware $134,560 $91,240 $167,620
District of Columbia $132,470 $81,880 $181,430
Florida $104,110 $67,410 $165,990
Georgia $117,360 $68,760 $174,680
Hawaii $106,980 $61,880 $171,750
Idaho $101,780 $55,850 $160,920
Illinois $116,800 $67,460 $172,120
Indiana $95,640 $62,910 $160,840
Iowa $117,520 $65,760 N/A
Kansas $101,430 $47,820 $163,580
Kentucky $92,580 $51,020 $149,520
Louisiana $90,090 $60,010 $132,000
Maine $85,490 $63,570 $139,590
Maryland $134,130 $78,600 $204,530
Massachusetts $124,920 $78,220 $178,190
Michigan $103,580 $61,910 $163,480
Minnesota $124,380 $77,440 $168,120
Mississippi $87,940 $54,200 $131,440
Missouri $96,800 $58,510 $144,500
Montana $92,500 $66,460 $106,390
Nebraska $103,280 $60,010 $158,910
Nevada $93,950 $64,770 $158,750
New Hampshire $135,050 $91,380 $191,270
New Jersey $131,340 $89,570 $182,630
New Mexico $130,070 $81,500 $173,900
New York $129,790 $79,020 $211,880
North Carolina $125,930 $72,940 $182,090
North Dakota $107,930 $62,400 $126,600
Ohio $106,460 $68,660 $164,980
Oklahoma $99,870 $53,840 $144,860
Oregon $100,260 $76,780 $153,460
Pennsylvania $110,290 $59,750 $171,030
Rhode Island $106,150 $78,310 $162,450
South Carolina $103,410 $66,040 $196,530
South Dakota $102,050 $72,580 $133,990
Tennessee $98,470 $63,880 $172,040
Texas $115,040 $72,870 $167,540
Utah $105,460 $61,670 $161,960
Vermont $84,860 $53,940 $135,110
Virginia $133,520 $80,090 $196,520
Washington $142,940 $84,330 $209,270
West Virginia $87,420 $55,120 $134,530
Wisconsin $103,570 $65,770 $158,350
Wyoming N/A N/A N/A

Source: U.S. Bureau of Labor Statistics (BLS) 2023 median salary; projected job growth through 2032. Actual salaries vary depending on location, level of education, years of experience, work environment, and other factors. Salaries may differ even more for those who are self-employed or work part time.

Getting started

Cryptographers are incredibly valuable assets to public and private entities alike for their ability to protect sensitive information via encryption. Their exceptional skills in cyber security and mathematics make them a highly specialized role that takes years of education and experience to learn, but if you think you can go the distance, you could cultivate a career that is impactful, relatively stable and possibly quite lucrative. To begin your education, just click the Find Schools button to research programs that can help you start your cryptographer or cyber security career path.


Updated: October 20, 2023

kendall upton

Written and reported by:

Kendall Upton

Staff Writer