Senior Software Engineer – PKI

This is a fully remote position, open to applicants in Michigan.

📋 Description

• Oversee the entire lifecycle of PKI and Key Management API services for automotive products and the surrounding ecosystem, which encompasses requirements gathering, architecture, implementation, testing, deployment, monitoring, and post-launch support.

• Create and develop secure, resilient, and scalable RESTful APIs and web services for CRL/OCSP, ACME, certificate issuance, encryption/decryption, software signing, key rotation, certificate lifecycle management, and HSM integration.

• Enforce least-privilege access controls utilizing OAuth or mTLS.

• Implement and strengthen PKI and key services by adhering to X.509, PKCS standards, ECC, RSA, AES, ensuring post-quantum readiness, and integrating HSM CSP.

• Establish and enforce policies and profiles for PKI certificates.

• Design PKI services that are highly available, fault-tolerant, and capable of zero-downtime issuance, disaster recovery, and multi-region replication.

• Release and deploy applications through build servers, CI/CD pipelines, and both on-premises and cloud-based Kubernetes infrastructures.

• Monitor and resolve codebase issues through SAST, DAST, software quality assessments, and vulnerability scans.

• Conduct monitoring and root-cause analysis; implement application logging and integrate with Splunk and security monitoring systems.

• Define best practices for software development, conduct code reviews, and mentor engineers while remaining actively involved in development.

• Collaborate with ECU embedded development teams to determine architecture requirements and key management strategies.

• Author and oversee technical cybersecurity requirements and process documentation.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, or equivalent education and experience.

• Over 5 years of experience in software engineering and secure coding using object-oriented programming languages such as C#/C++, Java, Python, or similar.

• Familiarity with applying NIST, OWASP, ISO, and IEEE security standards.

• Strong understanding of software architecture, development methodologies, and design principles, including test-driven development.

• Experience in applying Identity and Access Management principles within software services.

• Excellent software testing skills.

• Proficient in using Git for version control in development and release branches.

• Minimum of 3 years of experience in deploying and maintaining cloud infrastructure with Kubernetes or OpenShift, as well as managing SQL Postgres, Redis, and MongoDB database instances.

• At least 3 years of experience in building, maintaining, and integrating production PKI systems and supporting cryptographic interfaces.

• Strong knowledge of best practices in PKI and Key Management.

• Understanding and practical application of RSA, ECC, AES, X.509, PKCS#11, ACME, OCSP, CRL, and HSM integration.

• Must possess legal authorization to work in the United States.

• CISSP or similar cybersecurity certifications are a plus.

• Experience in customer-facing product ownership and the ability to manage multiple projects and deliverables is advantageous.

• Familiarity with in-vehicle network architecture, modules, and protocols is a plus.

🏝️ Benefits

• Immediate coverage for medical, dental, vision, and prescription drugs.

• Flexible family care days.

• Paid parental leave.

• Programs to support new parents in ramping up.

• Subsidized backup childcare options.

• Family-building benefits, including reimbursement for adoption and surrogacy expenses and fertility treatments.

• Vehicle discount programs for employees and their family members, along with management leases.

• Tuition assistance available.

• Established and active employee resource groups.

• Paid time off for individual and team community service activities.

• Generous paid holiday schedule, including the week between Christmas and New Year’s Day.

• Paid time off with the option to purchase additional vacation time.