Sr. Software Product Engineer

Job Req ID: 29756

Essential Duties and Responsibilities:

• PQC Technical Planning: Define CNSA 2.0 and post-quantum cryptography requirements, migration plans, platform dependencies, and implementation priorities.
• Security Architecture: Develop technical specifications for firmware signing, secure boot, device identity, certificate chains, attestation, key management, and secure provisioning.
• Platform Integration: Coordinate PQC and security integration across BMC, BIOS, hardware Root of Trust, Caliptra, manufacturing infrastructure, PKI services, and management software.
• Technical Specifications: Create detailed product specifications, architecture diagrams, certificate profiles, provisioning flows, interface requirements, and acceptance criteria.
• PKI and Key Lifecycle: Define requirements for key generation, certificate enrollment, signing services, secure storage, rotation, revocation, recovery, and ownership transfer.
• Attestation Development: Drive technical requirements for SPDM, DICE, IDevID, DPE, device attestation, remote attestation, measurement signing, and evidence verification.
• Cross-Team Execution: Work with Hardware, Firmware, Software R&D, Validation, Manufacturing, IT, and external vendors to resolve design gaps and implementation dependencies.
• Design and Security Reviews: Conduct architecture reviews, threat modeling, cryptographic design reviews, and implementation-readiness assessments.
• Validation and Interoperability: Define test requirements and support interoperability, negative testing, certificate validation, cryptographic verification, and platform security validation.
• Issue Ownership: Investigate complex security, provisioning, certificate, and attestation issues and drive them to resolution with responsible engineering teams.
• Technology Evaluation: Evaluate cryptographic libraries, hardware capabilities, industry standards, vendor solutions, and implementation options for current and next-generation platforms.
• Customer Support: Provide technical support for customer RFQs, architecture discussions, compliance assessments, and security-feature deployment.

Qualifications:

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Information Security, Cryptography, or a related field.
• 5+ years of experience in embedded systems, server firmware, platform security, cryptography, PKI, technical product engineering, or security architecture.
• Strong understanding of public-key cryptography, digital signatures, certificates, certificate chains, key lifecycle management, and secure provisioning.
• Working knowledge of post-quantum cryptography, including ML-DSA, ML-KEM, LMS/HSS, hybrid cryptography, or PQC migration considerations.
• Experience with platform-security technologies such as BMC, BIOS, secure boot, hardware Root of Trust, TPM, DICE, Caliptra, SPDM, MCTP, or remote attestation.
• Experience defining technical requirements and coordinating implementation across Hardware, Firmware, Software, Manufacturing, Validation, and IT infrastructure teams.
• Familiarity with standards and guidance such as CNSA 2.0, NIST FIPS 203/204/205, NIST SP 800-208, DMTF SPDM, TCG DICE, X.509, CMS, or RFC 3161 is preferred.
• Ability to review cryptographic architecture, provisioning flows, certificate profiles, protocol designs, and security-test results.
• Familiarity with OpenSSL, Linux, embedded Linux, Python, shell scripting, C/C++, or cryptographic test tools is preferred.
• Strong analytical and troubleshooting skills, including the ability to isolate issues across hardware, firmware, certificates, protocols, and infrastructure.
• Strong written and verbal English communication skills, with the ability to explain complex cryptographic and platform-security topics clearly.
• Experience working with semiconductor vendors, certificate authorities, manufacturing teams, cloud services, or enterprise customers is preferred.