Software Engineer, HSM Infrastructure Security, Consumer Devices

Job summary

Responsibilities

You will develop security-critical software and firmware within, or immediately adjacent to, an HSM trust boundary. Depending on your background, this may include HSM trusted applications, firmware services, cryptographic mechanisms, device drivers, PKCS#11 components, secure-provisioning…

• Design and implement security-critical software and firmware for HSMs, secure elements, trusted execution environments, and hardware roots of trust.
• Build and harden the policy-to-HSM boundary responsible for authorizing certificate issuance and cryptographic signing operations.
• Develop HSM trusted applications, firmware components, host interfaces, device drivers, SDKs, or cryptographic service integrations.
• Implement or extend cryptographic interfaces such as PKCS#11, OpenSSL providers or engines, platform key-storage APIs, or comparable hardware-security interfaces.
• Build firmware and software that cryptographically enforces key generation, provisioning, usage, rotation, recovery, and destruction policies.

What they're looking for

• 5+ years experience building secure embedded firmware for constrained environments
• Deep programming experience in C, C++, or Rust.
• A strong track record of designing, implementing, debugging, and shipping production systems software.
• Hands-on experience developing security-critical software or firmware within, or directly adjacent to, an HSM, secure element, TEE, or hardware root of trust.
• Experience developing one or more of the following:

Tech stack

• C++
• Rust
• AWS