We are seeking an exceptional Software Engineer specializing in Public Key Infrastructure (PKI) and secure API services to own the end-to-end lifecycle of mission-critical cryptographic systems. You will design, build, deploy, and maintain high-assurance PKI and security service APIs that power certificate issuance, lifecycle management, revocation, and integration for the connected vehicle product ecosystem. Key Responsibilities • Lead the full lifecycle of PKI and Key Management services supporting our vehicle products and ecosystem - lead customer requirements gathering, architecture design, implementation, testing, deployment, monitoring, and post-launch support. • Design and develop robust, secure, and scalable RESTful APIs and web services for various features and use cases: CRL/OCSP, ACME, Certificate Issuance, message encryption/decryption, software signing, key rotation and certificate lifecycle management, HSM integration with PKCS11. Implement access control methods that enforce least privilege access principles using OAuth or mTLS. • Implement and harden PKI and key services with deep knowledge of PKI industry standards, X.509, PKCS standards, elliptic curve cryptography (ECC) and RSA, post-quantum readiness, and hardware security module CSP integration. Apply hybrid encryption techniques with AES. Define and enforce PKI certificate policies and certificate profiles. • Release and Deploy your apps through build server, CI/CD pipeline, and infrastructure involving on-premises and cloud Kubernetes • Monitor and address findings regularly in code base through SAST, DAST, software quality and security vulnerability scanning. Drive and support testing at each stage of the development process. Job Requirements Skills Required • Software Testing, PostgreSQL, Computer engineering, Software Development Lifecycle, Software Documentation, Application Development, Bouncy Castle Cryptographic, Cloud Infrastructure, Google Cloud Platform, .NET Core, .NET Developer, Cyber Security, C#, Application Testing, Agile Software Development Skills Preferred • Kubernetes, Technical Communication, Technical Requirements, Technical Documentation, Application Architect, Technical Analysis Experience Required • 6+ years of experience in IT with 4+ years in software engineering/development and secure coding practices using object oriented programming • Strong knowledge and applicability of software architecture, development, methodologies and design principles including test-driven development • Strong understanding and ability to apply cryptographic algorithms and standards in software, including RSA, ECC, AES, X.509 • Proven track record of owning customer-facing products from ideation to general acceptance, and flexibility to manage multiple projects and deliverables throughout lifecycle. Experience Preferred • 2+ years of experience deploying and maintaining cloud infrastructure with Kubernetes or OpenShift, and managing database instances (SQL Postgres, Redis, MongoDB) • 2+ years building, maintaining, and integrating with production PKI systems and supporting cryptographic interfaces. • Experience and understanding of industry security standards and applying them in our software solutions and processes, including NIST, OWASP, and relevant ISO and IEEE standards. • Strong knowledge and applicability of software architecture, development, methodologies and design principles including test-driven development • Familiarity with in-vehicle network architecture, modules, and protocols Education Required • Bachelor's degree in Computer Science / Engineering **Listed salary ranges may vary based on experience, qualifications, and local market. Also, some positions may include bonuses or other incentives*** Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face-to-face conversations will involve a description of the job for which you have applied. We will also speak with you about the process, including interviews and job offers. #LI-AK3 #LI-ONSITE Pay Range: $ 61.00 - $ 66.00