Product Security Engineer - Cryptography and PKI

San Carlos, CA (on-site)

• Design and manage end-to-end cryptographic services, including PKI and key lifecycle management

• Establish HSM infrastructure as the root of trust for firmware signing and IoT authentication

• Lead the evaluation, procurement, configuration, and integration of HSM vendor solutions

• Architect scalable key management systems for future growth

• Design remote device attestation mechanisms leveraging technologies such as fTPM or OP-TEE

• Build and automate secure pipelines for firmware and bootloader signing

• Define infrastructure and policies for author key provisioning, rotation, and destruction

• Secure build systems and code-signing workflows

• Develop factory provisioning architecture for mass key and certificate distribution

• Support secure communication protocol development

• Collaborate with cross-functional teams including Product Security, Cloud Infrastructure, Device Engineering, and SecOps