Senior Software Development Engineer - Code Signing

About the role 

As a Senior Software Development Engineer in HPE's Product Security Office, you will design, develop, and deploy enterprise code signing and certificate-based security solutions that support secure software delivery across the organization. You will apply strong software engineering expertise and practical knowledge of public key infrastructure (PKI), digital certificates, key management, and signing automation to deliver secure, scalable, and maintainable solutions. 

This hands-on role combines software engineering, security engineering, and automation. You will work across engineering and security teams to improve signing workflows, strengthen software supply chain security, advance cryptographic capabilities, and establish standards and practices that scale across the enterprise. You will also provide technical leadership and contribute to engineering excellence through mentoring, collaboration, and knowledge sharing.

About you 

You are an experienced software engineer who enjoys solving complex technical problems and building security capabilities that are broadly adopted. You bring expertise in software development, code signing technologies, certificate lifecycle management, and secure software delivery practices. 

You are comfortable leading technical initiatives, evaluating architecture decisions, balancing security and usability requirements, and guiding engineers through design and implementation challenges. You communicate effectively with both technical and business stakeholders and contribute to engineering excellence through collaboration, mentoring, and continuous improvement. 

• →Lead the design, development, testing, integration, and deployment of enterprise code signing solutions and certificate-based security services. 

• →Review software designs, architectures, and development activities to ensure alignment with secure software development, PKI, key management, and code signing standards while improving quality and reducing security and operational risk. 

• →Provide technical leadership and domain expertise for cross-functional initiatives involving code signing, digital certificates, cryptographic controls, and software supply chain security. 

• →Drive the adoption and integration of technologies that improve signing automation, cryptographic agility, certificate lifecycle management, and readiness for post-quantum cryptography. 

• →Contribute to the development of scalable and reliable code signing capabilities that support enterprise software delivery objectives. 

• →Mentor engineers through technical guidance, design reviews, knowledge sharing, and hands-on collaboration. 

• Bachelor's or Master's degree in Computer Science, Information Systems, or a related discipline, or equivalent practical experience. 

• Typically 6-10 years of experience designing, developing, and deploying enterprise software applications and services. 

• Experience building secure applications, APIs, services, and automation using modern programming languages and application frameworks. 

• Experience integrating code signing and certificate management workflows into CI/CD pipelines using tools such as GitOps, Docker, Jenkins, GitHub Actions, or similar technologies. 

• Experience designing secure software systems and services, including certificate integration, policy enforcement, auditability, and high-availability architectures. 

• Experience designing and integrating software solutions across Windows, Linux, macOS, cloud, containerized, and hybrid environments. 

• Experience with software testing methodologies, test planning, debugging complex issues, and developing testing tools and automation. 

Experience and expertise 

• Experience with code signing architectures, public key infrastructure (PKI), certificate lifecycle management, hardware-backed key protection, and signing automation. 

• Understanding of applied cryptography, digital certificates, certificate authorities, trust models, key management, and associated governance frameworks. 

• Understanding of software supply chain security, OWASP Top 10 vulnerabilities, secure coding practices, and protection of signing credentials and cryptographic keys. 

• Familiarity with AI/ML and agentic AI concepts. 

• Experience with software design tools, frameworks, and programming languages used to build enterprise-scale applications and services. 

• Strong analytical and problem-solving capabilities. 

• Strong written and verbal communication skills, including the ability to communicate technical architectures, design proposals, and implementation options to technical and leadership audiences. 

HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here.

Note: This option is reserved for applicants needing assistance/reasonable accommodation related to a disability.

We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.

We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.

We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.

HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.

We have become aware of an increase in fraudulent recruitment activities in which individuals impersonate our company or authorized recruitment agencies to offer fake employment opportunities. These scams may occur through false websites, emails, social media, or chat-based applications and often aim to obtain personal information or money. Please note that Hewlett Packard Enterprise (HPE), its direct and indirect subsidiaries and affiliated companies, and its authorized recruitment agencies/vendors will never charge a candidate a registration fee, hiring fee, or any other fee in connection with its recruitment and hiring process. We also never request personal information such as back account details, Social Security numbers, or national IDs via social media or chat applications.

All legitimate job opportunities will come through official company channels, and candidates are responsible for verifying the credentials of any third party claiming to represent the company. Any reliance on fraudulent communication is at the individual’s own risk, and HPE disclaims legal liability for any resulting damages. If you suspect recruitment fraud, do not share personal information or make any payments and report the incident to your local authorities immediately.