Senior Backend Software Engineer - PKI & CybersecurityOverview / Summary We are seeking a Software Engineer specializing in Public Key Infrastructure (PKI), cryptography, and secure API services to develop and maintain mission-critical security systems. This role focuses on the end-to-end lifecycle of cryptographic keys and certificates, including certificate issuance, lifecycle management, revocation, and integration.
The position involves designing, developing, deploying, and maintaining secure and scalable backend applications, APIs, microservices, and web services that support connected vehicle product ecosystems. The role also includes cryptographic engineering, cloud and on-premises infrastructure, security practices, testing, monitoring, and application lifecycle management.
This is a hybrid position requiring four days per week onsite.
Key Responsibilities - Engage with customers to understand use cases and requirements.
- Solve complex problems by designing, developing, and delivering solutions using various tools, languages, frameworks, and technologies.
- Align development activities with architecture guidelines for a unified and coherent approach.
- Design, develop, and deliver new code using various tools, languages, frameworks, and technologies.
- Develop and maintain backend applications, APIs, and microservices using server-side languages such as Java, Python, and C#.
- Design and develop secure and scalable RESTful APIs and web services.
- Support certificate issuance, certificate lifecycle management, revocation, CRL/OCSP, ACME, software signing, key rotation, and message encryption/decryption.
- Collaborate with front-end developers and cross-functional teams, including product owners, designers, and architects.
- Manage application deployment to cloud and on-premises environments.
- Support application health and performance monitoring, security hardening, and disaster recovery.
- Manage data storage and retrieval using database technologies such as PostgreSQL, Oracle, MySQL, MongoDB, and Redis.
- Promote improvements in programming practices, including test-driven development, continuous integration, and continuous delivery.
- Optimize backend infrastructure and deployment practices to improve application resiliency and reliability.
- Support security practices to safeguard user data, including encryption and anonymization.
- Write and manage code that interfaces with Hardware Security Modules (HSMs) to apply cryptography and issue certificates.
- Implement access control methods using OAuth or mutual TLS (mTLS) to enforce least-privilege access principles.
- Implement and harden PKI and key management services using PKI industry standards, X.509, PKCS standards, ECC, and RSA.
- Apply hybrid encryption techniques using AES.
- Define and enforce PKI certificate policies and certificate profiles.
- Integrate HSMs using PKCS#11.
- Release and deploy applications through build servers, CI/CD pipelines, and infrastructure involving cloud and on-premises Kubernetes.
- Monitor and address findings through SAST, DAST, software quality, and security vulnerability scanning.
- Drive and support testing at each stage of the development process.
- Own the full lifecycle of PKI and key management services, including requirements gathering, architecture design, implementation, testing, deployment, monitoring, and post-launch support.
Required Qualifications - Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, or a related engineering field.
- 6+ years of experience in IT.
- 4+ years of experience in software engineering/development and secure coding practices using object-oriented programming.
- Practical experience in two coding languages or advanced practical experience in one coding language.
- Strong knowledge and applicability of software architecture, development methodologies, and design principles.
- Strong understanding and ability to apply cryptographic algorithms and standards in software, including RSA, ECC, AES, and X.509.
- Experience with Software Development Lifecycle, software testing, application development, and software documentation.
- Experience with C# and .NET Core.
- Experience with PostgreSQL.
- Experience with cloud infrastructure and Google Cloud Platform.
- Experience with cybersecurity and secure coding practices.
- Experience with Bouncy Castle Cryptographic.
- Proven track record of owning customer-facing products from ideation through general acceptance.
- Ability to manage multiple projects and deliverables throughout their lifecycle.
- Experience with test-driven development.
Preferred Qualifications - 2+ years of experience deploying and maintaining cloud infrastructure with Kubernetes or OpenShift.
- 2+ years of experience managing database instances including PostgreSQL, Redis, and MongoDB.
- 2+ years of experience building, maintaining, and integrating with production PKI systems and supporting cryptographic interfaces.
- Experience and understanding of industry security standards and their application to software solutions and processes, including NIST, OWASP, and relevant ISO and IEEE standards.
- Familiarity with in-vehicle network architecture, modules, and protocols.
- Experience with Kubernetes.
- Strong technical communication skills.
- Experience with technical requirements, technical documentation, technical analysis, and application architecture.
#LI-Hybrid #LI-RM1
