Senior Security Engineer

Key

Responsibilities What We Expect You to Do - Roles &

Responsibilities Own and define the overall security architecture for industrial connectivity platforms. Design secure network architectures, trust zones, and network segmentation across IT and OT environments. Implement and manage reverse proxy configurations, TLS termination, and secure communication channels. Harden Linux systems, container environments, and OCI-based deployments. Implement container isolation, image verification, secrets management, backup, and disaster recovery mechanisms. Manage secure deployments using Docker, Docker Compose, and Kubernetes. Design and implement API security, authentication, authorization, and service-to-service identity mechanisms. Identify and address security vulnerabilities, including OWASP-related risks. Implement PKI infrastructure, X.509 certificate management, TLS/mTLS, and EST- based certificate provisioning. Manage Certificate Authority operations and secure cryptographic key storage using PKCS#11, SoftHSM, or HSM. Secure MQTT broker communication through authentication, authorization, and ACL configurations. Define and enforce database access control and security policies. Establish software supply chain security practices, including dependency management, SBOM generation, and artifact signing. Secure CI/CD pipelines, application secrets, and authenticated offline software update mechanisms. Implement security logging, monitoring, incident response, and vulnerability disclosure processes. Conduct CRA risk assessments and prepare security-related technical documentation. Review, develop, and maintain Python/FastAPI backend and integration code, including automated tests. Collaborate with embedded engineering teams to validate interfaces and ensure end-to-end platform security. Drive security reviews, identify potential risks, and ensure security best practices are followed throughout the development lifecycle. Experience/Qualifications: Experience: 10+ Years

Technical

Skills Required Strong experience in network security architecture, network segmentation, and trust-zone design. Hands-on experience with reverse proxies, TLS termination, and OT/IT network integration. Strong knowledge of Linux security and hardening. Experience with OCI container security, container isolation, and image provenance. Hands-on experience with Docker, Docker Compose, and Kubernetes. Strong understanding of API authentication, authorization, and service-to-service identity management. Knowledge of OWASP security vulnerabilities, tenant isolation, and audit mechanisms. Strong experience with X.509, PKI, TLS, mTLS, and EST. Experience in Certificate Authority (CA) operations and key management. Knowledge of PKCS#11, SoftHSM, and Hardware Security Modules (HSM). Experience with MQTT broker authentication, authorization, and Access Control Lists (ACLs). Knowledge of database security and access control. Experience with software supply chain security, dependency management, and Software Bill of Materials (SBOM). Knowledge of artifact signing, CI/CD pipeline security, and secrets management. Experience with secure offline software updates. Knowledge of security logging, monitoring, and incident response. Understanding of CRA (Cyber Resilience Act) risk assessments and technical documentation. Ability to work with Python and FastAPI backend code, including integration and testing. Basic ability to read and understand embedded C code to validate software interfaces. Good to Have: Knowledge of IEC 62443 industrial cybersecurity standards. Experience with Operational Technology (OT) deployments. Familiarity with enterprise PKI and provisioning services. Knowledge of BRSKI/MASA. Experience with secure boot and firmware signing. Experience coordinating penetration testing activities.