Sr. Software Product Engineer

Job description

Job Req ID

29756 Essential Duties and Responsibilities: PQC Technical Planning: Define CNSA 2.0 and post-quantum cryptography requirements, migration plans, platform dependencies, and implementation priorities.

Security Architecture

Develop technical specifications for firmware signing, secure boot, device identity, certificate chains, attestation, key management, and secure provisioning.

Platform Integration

Coordinate PQC and security integration across BMC, BIOS, hardware Root of Trust, Caliptra, manufacturing infrastructure, PKI services, and management software.

Technical Specifications

Create detailed product specifications, architecture diagrams, certificate profiles, provisioning flows, interface requirements, and acceptance criteria.

PKI and Key Lifecycle

Define requirements for key generation, certificate enrollment, signing services, secure storage, rotation, revocation, recovery, and ownership transfer.

Attestation Development

Drive technical requirements for SPDM, DICE, IDevID, DPE, device attestation, remote attestation, measurement signing, and evidence verification.

Cross-Team Execution

Work with Hardware, Firmware, Software R&D, Validation, Manufacturing, IT, and external vendors to resolve design gaps and implementation dependencies.

Design and Security Reviews

Conduct architecture reviews, threat modeling, cryptographic design reviews, and implementation-readiness assessments.

Validation and Interoperability

Define test requirements and support interoperability, negative testing, certificate validation, cryptographic verification, and platform security validation.

Issue Ownership

Investigate complex security, provisioning, certificate, and attestation issues and drive them to resolution with responsible engineering teams.

Technology Evaluation

Evaluate cryptographic libraries, hardware capabilities, industry standards, vendor solutions, and implementation options for current and next-generation platforms.

Customer Support

Provide technical support for customer RFQs, architecture discussions, compliance assessments, and security-feature deployment.

Qualifications

Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Information Security, Cryptography, or a related field. 5+ years of experience in embedded systems, server firmware, platform security, cryptography, PKI, technical product engineering, or security architecture. Strong understanding of public-key cryptography, digital signatures, certificates, certificate chains, key lifecycle management, and secure provisioning.

Working knowledge of post-quantum cryptography, including ML-DSA, ML-KEM, LMS/HSS, hybrid cryptography, or PQC migration considerations. Experience with platform-security technologies such as BMC, BIOS, secure boot, hardware Root of Trust, TPM, DICE, Caliptra, SPDM, MCTP, or remote attestation. Experience defining technical requirements and coordinating implementation across Hardware, Firmware, Software, Manufacturing, Validation, and IT infrastructure teams.

Familiarity with standards and guidance such as CNSA 2.0, NIST FIPS 203/204/205, NIST SP 800-208, DMTF SPDM, TCG DICE, X.509, CMS, or RFC 3161 is preferred. Ability to review cryptographic architecture, provisioning flows, certificate profiles, protocol designs, and security-test results. Familiarity with OpenSSL, Linux, embedded Linux, Python, shell scripting, C/C++, or cryptographic test tools is preferred. Strong analytical and troubleshooting skills, including the ability to isolate issues across hardware, firmware, certificates, protocols, and infrastructure.

Strong written and verbal English communication skills, with the ability to explain complex cryptographic and platform-security topics clearly. Experience working with semiconductor vendors, certificate authorities, manufacturing teams, cloud services, or enterprise customers is preferred.