Senior Security/PKI Engineer – Embedded & IoT Security

About the role

We are seeking a Senior Security/PKI Engineer to design and implement digital trust, cryptographic key protection, and device security for embedded and IoT solutions.

Key responsibilities

• Design and implement PKI and device identity solutions, managing certificate issuance, provisioning, renewal, revocation and expiration monitoring.
• Implement secure cryptographic key lifecycle processes, including generation, storage, rotation and destruction.
• Integrate Hardware Security Modules (HSMs) and Trusted Platform Modules (TPMs) and implement secure boot, firmware signing and integrity verification.
• Design or integrate IoT SAFE capabilities and support secure device communications using TLS and mutual TLS.
• Ensure solutions align with applicable FIPS requirements and assess the use of validated cryptographic modules.
• Perform threat modeling and security architecture reviews while collaborating with hardware, firmware, software and operations teams.

Required profile

• Proven hands‑on experience in security engineering, PKI and applied cryptography.
• Strong analytical skills, technical ownership and clear documentation.

Required skills

• X.509 certificates, certificate authorities and trust chains.
• Hardware Security Modules (HSMs) and cryptographic key lifecycle management.
• Secure boot and TPM‑based security.
• Embedded or IoT device security and IoT SAFE.
• Understanding of FIPS requirements and cryptographic module validation.
• Linux and scripting for security automation.
• Secure device communications using TLS and mutual TLS.