Why You'll Love This RoleLumentum is seeking a Senior Embedded Security Developer to design, implement, and validate security features for next-generation optical circuit switch platforms. This role focuses on device identity, secure provisioning, network management security, and hardware-rooted trust across the product lifecycle-from manufacturing and deployment through operation and recovery.
What You'll Be Doing- Design, implement, and maintain gNSI security services and their operational commands and workflows, including authorization, path authorization, credential rotation, and certificate management.
- Implement secure zero-touch provisioning (Bootz) and device enrollment workflows, including bootstrap identity, credential issuance, trust establishment, and recovery.
- Develop device attestation capabilities using TPM-backed identity and measured-boot evidence, including collection and validation of platform measurements.
- Implement and harden TLS and mutual TLS for control, telemetry, and management planes, including certificate issuance, rotation, revocation, and trust-bundle updates.
- Build security tests and automation; investigate defects; and support internal and external security reviews.
What We're Looking ForEducation:Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
Experience:
Core Requirements:- 5+ years of embedded software development experience, including substantial work on security-sensitive systems.
- Strong Python or Go development skills; familiarity with C or C++.
- Experience developing for Linux-based embedded platforms; RTOS experience is a plus.
- Practical experience with cryptography, PKI, TLS, and mutual TLS.
- Understanding of network-device security and management protocols, such as gRPC, gNMI, or gNSI.
- Experience designing or integrating secure provisioning, enrollment, credential management, or certificate lifecycle workflows.
- Strong debugging skills and the ability to work across software and platform boundaries.
- Clear written and verbal communication skills, including the ability to document designs and explain security decisions.
Preferred Qualifications- Experience implementing or operating gNSI services such as authz, pathz, credentialz, or certz.
- Experience with secure zero-touch provisioning, device attestation, TPM 2.0, measured boot, or hardware-backed device identity.
- Knowledge of secure boot chains, hardware roots of trust, or manufacturing security.
- Experience in telecom, networking, optical systems, or other embedded infrastructure.
- Familiarity with security testing, automation, and vulnerability review processes.
Perks You'll Love- Flexible time off
- Health and wellness benefits (physical and mental)
- Tuition reimbursement and career growth support
- A workplace built for you: free gym, games room, prayer room
- Subsidized meals, free coffee/tea
- Employee stock options and incentive plans
- A collaborative, innovative, and inclusive culture
Salary RangeThe salary range for this position is $110,000 - $140,000
Final compensation will be determined based on factors such as experience, skills, and qualifications. In line with our commitment to being a great place to work, Lumentum offers competitive total rewards which may include annual bonus, equity, and comprehensive health and welfare benefits.
