Sr. Software Product Engineer

Job Req ID: 29756

Essential Duties and Responsibilities:

1. PQC Technical Planning: Define CNSA 2.0 and post-quantum cryptography requirements, migration plans, platform dependencies, and implementation priorities.
2. Security Architecture: Develop technical specifications for firmware signing, secure boot, device identity, certificate chains, attestation, key management, and secure provisioning.
3. Platform Integration: Coordinate PQC and security integration across BMC, BIOS, hardware Root of Trust, Caliptra, manufacturing infrastructure, PKI services, and management software.
4. Technical Specifications: Create detailed product specifications, architecture diagrams, certificate profiles, provisioning flows, interface requirements, and acceptance criteria.
5. PKI and Key Lifecycle: Define requirements for key generation, certificate enrollment, signing services, secure storage, rotation, revocation, recovery, and ownership transfer.
6. Attestation Development: Drive technical requirements for SPDM, DICE, IDevID, DPE, device attestation, remote attestation, measurement signing, and evidence verification.
7. Cross-Team Execution: Work with Hardware, Firmware, Software R&D, Validation, Manufacturing, IT, and external vendors to resolve design gaps and implementation dependencies.
8. Design and Security Reviews: Conduct architecture reviews, threat modeling, cryptographic design reviews, and implementation-readiness assessments.
9. Validation and Interoperability: Define test requirements and support interoperability, negative testing, certificate validation, cryptographic verification, and platform security validation.
10. Issue Ownership: Investigate complex security, provisioning, certificate, and attestation issues and drive them to resolution with responsible engineering teams.
11. Technology Evaluation: Evaluate cryptographic libraries, hardware capabilities, industry standards, vendor solutions, and implementation options for current and next-generation platforms.
12. Customer Support: Provide technical support for customer RFQs, architecture discussions, compliance assessments, and security-feature deployment.

Qualifications:

1. Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Information Security, Cryptography, or a related field.
2. 5+ years of experience in embedded systems, server firmware, platform security, cryptography, PKI, technical product engineering, or security architecture.
3. Strong understanding of public-key cryptography, digital signatures, certificates, certificate chains, key lifecycle management, and secure provisioning.
4. Working knowledge of post-quantum cryptography, including ML-DSA, ML-KEM, LMS/HSS, hybrid cryptography, or PQC migration considerations.
5. Experience with platform-security technologies such as BMC, BIOS, secure boot, hardware Root of Trust, TPM, DICE, Caliptra, SPDM, MCTP, or remote attestation.
6. Experience defining technical requirements and coordinating implementation across Hardware, Firmware, Software, Manufacturing, Validation, and IT infrastructure teams.
7. Familiarity with standards and guidance such as CNSA 2.0, NIST FIPS 203/204/205, NIST SP 800-208, DMTF SPDM, TCG DICE, X.509, CMS, or RFC 3161 is preferred.
8. Ability to review cryptographic architecture, provisioning flows, certificate profiles, protocol designs, and security-test results.
9. Familiarity with OpenSSL, Linux, embedded Linux, Python, shell scripting, C/C++, or cryptographic test tools is preferred.
10. Strong analytical and troubleshooting skills, including the ability to isolate issues across hardware, firmware, certificates, protocols, and infrastructure.
11. Strong written and verbal English communication skills, with the ability to explain complex cryptographic and platform-security topics clearly.
12. Experience working with semiconductor vendors, certificate authorities, manufacturing teams, cloud services, or enterprise customers is preferred.