Cybersecurity Key Provisioning Process Engineer

We are seeking a Cybersecurity Key Provisioning Process Engineer to join our Product Cybersecurity organization. This role sits at the intersection of automotive engineering, cryptographic security architecture, and manufacturing operations owing the end-to-end process by which cryptographic key material is defined, provisioned, and secured across every Electronic Control Unit (ECU) and vehicle program. Responsibilities • Own and facilitate the process for defining, documenting, and approving cryptographic key requirements (algorithms, key lengths, key hierarchies, usage policies, rotation/expiry rules) for each ECU type and vehicle program. • Serve as the central point of coordination between vehicle program teams, ECU feature owners, and cybersecurity architecture to ensure requirements are complete, consistent, and traceable across program timelines. • Conduct technical audits of Tier-1 supplier manufacturing sites and processes to validate conformance to our cybersecurity requirements. • Assess supplier readiness against cryptographic and secure manufacturing requirements; identify gaps and drive corrective action plans. • Establish and monitor supplier compliance metrics, escalating non-conformances through appropriate governance channels. • Partner with cybersecurity architects, ECU/software engineering teams, vehicle program management, procurement, and manufacturing to define cryptographic key requirements tailored to each ECU's function, threat model, and program constraints. • Orchestrate the technical implementation of approved key requirements within backend PKI and KMS infrastructure, coordinating with platform/IT teams responsible for these systems. Define and manage key lifecycle workflows within the KMS in alignment with program and supplier timelines. • Troubleshoot and resolve issues in the key delivery pipeline between backend systems and supplier manufacturing lines. • Author clear, precise technical documentation, specifications, and work instructions covering cryptographic key requirements, provisioning processes, and PKI/KMS interfaces. • Cascade approved requirements to relevant internal teams and external suppliers, ensuring proper acknowledgment and implementation. • Enforce compliance with documented requirements through audits, design reviews, and program gate reviews; maintain version control and change management for all specifications. Job Requirements Experience Required • 6+ years of experience Cybersecurity Key Provisioning. • Experience translating cryptographic and cybersecurity requirements into clear, actionable engineering specifications. • Demonstrated ability to drive supplier accountability through security audits, integration activities, and follow-up on corrective actions. • Hands-on experience operating or supporting backend Public Key Infrastructure (PKI) and Key Management Systems (KMS), including secure key generation and distribution at scale. • Experience developing and governing security policies and procedures, reviewing security controls, and assessing supplier conformance with key management requirements. • Ability to monitor compliance risks and security vulnerabilities and coordinate appropriate mitigation activities. • Experience working cross-functionally with ECU product and cybersecurity teams to define and clarify ECU key requirements. • Ability to translate ECU key requirements into deliverables for PKI/KMS development teams and support key generation and distribution. • Experience onboarding Tier-1 suppliers to secure key-distribution processes used in ECU manufacturing. • Strong understanding of cybersecurity engineering, supplier quality and manufacturing processes, and product key management systems. Experience Preferred • Familiarity with ISO 27001, Supply Chain Operations, Risk Assessment • Familiarity with automotive cybersecurity standards (ISO/SAE 21434, UNECE R155/R156). • Hands-on experience with commercial or in-house PKI/KMS platforms (e.g., Thales, Entrust, HashiCorp Vault, AWS KMS, or automotive-specific secure provisioning platforms). • Experience with ECU/embedded systems development lifecycle and vehicle program timing. • Knowledge of secure manufacturing/provisioning protocols (e.g., SHE, HSM-based key injection, secure flashing). • Project or process management experience (e.g., Agile, Six Sigma, or similar). • Experience with relevant control frameworks (e.g., NIST 800-53/800-57, ISO 27001, PCI-HSM, or automotive-specific key management security standards) is a plus. Education Required • Bachelor's degree **Listed salary ranges may vary based on experience, qualifications, and local market. Also, some positions may include bonuses or other incentives*** #LI-NP1 #LI-ONSITE Pay Range: $ 61.00 - $ 66.00