Job Title: Security Software Engineer
Job Description
The Security Software Engineer designs, builds, and supports secure systems that provision sensitive information into devices during manufacturing. This role focuses on protecting passwords, certificates, cryptographic keys, and other device secrets throughout the manufacturing process by developing Linux-based software, infrastructure, and automation that enable secure device identity and provisioning. The engineer collaborates closely with manufacturing, software, security, and engineering teams to create reliable, scalable, and secure solutions that underpin critical production operations.
Responsibilities
- Design, develop, and maintain secure systems for provisioning passwords, certificates, cryptographic keys, and device identities into devices during manufacturing.
- Develop software, scripts, and infrastructure that support secure and reliable manufacturing operations and device provisioning workflows.
- Implement and maintain PKI and TLS-based services used during device provisioning to ensure secure communication and authentication.
- Manage certificate enrollment, issuance, renewal, validation, storage, and revocation processes to maintain a robust certificate lifecycle.
- Protect sensitive credentials and cryptographic material throughout the provisioning lifecycle, including storage, access, and rotation.
- Develop and support Linux-based applications, services, command-line tools, and automation that enable secure manufacturing processes.
- Investigate and resolve issues involving certificates, cryptographic keys, authentication mechanisms, provisioning failures, and manufacturing workflows.
- Work with manufacturing teams to translate operational requirements into secure, reliable, and scalable technical solutions.
- Document system configurations, provisioning processes, recovery procedures, and security controls in a clear and maintainable manner.
- Help improve the reliability, scalability, and security of device provisioning processes through continuous enhancement and optimization.
- Collaborate with cross-functional teams to address complex PKI and cryptographic challenges and ensure secure device identity and authentication.
- Support manufacturing environments that may be restricted, offline, or have limited connectivity by designing appropriate secure solutions.
- Contribute to infrastructure automation and configuration management to streamline and standardize secure provisioning systems.
- Apply strong troubleshooting skills to diagnose and resolve technical issues related to secure boot, measured boot, hardware-backed identity, and key storage.
- Maintain thorough documentation and communicate effectively with engineering, security, and manufacturing stakeholders to align on requirements and solutions.
Essential Skills
- 5+ years of experience with Linux software development, including building and supporting applications, services, and command-line tools.
- Strong practical knowledge of PKI, TLS, and certificate management, including enrollment, issuance, renewal, validation, storage, and revocation.
- Programming experience with Python and Go for developing secure software and automation.
- Solid understanding of security principles related to protecting passwords, certificates, cryptographic keys, and device secrets.
- Experience working with embedded systems and related software environments.
- Hands-on experience with TPMs, secure boot, measured boot, or similar device identity and integrity technologies.
- Familiarity with hardware security modules (HSMs), secure elements, secrets-management platforms, or key-management systems.
- Experience with APIs and gRPC for building and integrating secure services and infrastructure components.
- Strong scripting and shell skills for automation, tooling, and operational support in Linux environments.
- Demonstrated ability to troubleshoot complex issues involving certificates, keys, authentication, and manufacturing workflows.
- Strong documentation skills to clearly describe system configurations, processes, recovery procedures, and security controls.
- Effective cross-functional communication skills to collaborate with manufacturing, engineering, software, and security teams.
Additional Skills & Qualifications
- Experience securing manufacturing systems or device provisioning workflows in production environments.
- Knowledge of TPMs, hardware-backed identity, attestation, or secure key storage mechanisms.
- Experience with embedded systems, firmware, or connected devices and their security requirements.
- Familiarity with secure boot, measured boot, or other device identity and integrity technologies.
- Experience with HSMs, secure elements, secrets-management platforms, or key-management systems used in secure manufacturing.
- Knowledge of APIs, gRPC, infrastructure automation, and configuration management tools.
- Experience supporting restricted, offline, or limited-connectivity environments and designing secure solutions for such contexts.
- Understanding of access controls, audit logging, credential rotation, and recovery processes in secure systems.
- Ability to take ownership of security behind how devices are identified, authenticated, and provisioned.
- Interest in solving complex PKI and cryptographic challenges in a manufacturing and device provisioning context.
Job Type & Location
This is a Contract position based out of Ottawa, ON.
Pay And Benefits
The pay range for this position is $60.00 - $80.00/hr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
Workplace Type
This is a fully onsite position in Ottawa,ON.
À propos d'Actalent
Actalent est un leader mondial dans les services dingénierie et de sciences ainsi que dans les solutions de talents. Nous aidons des entreprises visionnaires à faire progresser leurs initiatives dingénierie et de science grâce à laccès à des experts spécialisés qui favorisent léchelle, linnovation et la rapidité de mise sur le marché. Avec un réseau de près de 20 000 consultants et 5 000 clients à travers les États-Unis, le Canada, lAsie et lEurope, Actalent dessert de nombreuses entreprises du Fortune 500. Nous sommes fiers dêtre lune des 500 meilleures firmes de conception de lEngineering News-Record (ENR) pour nos services de conception en ingénierie et un lauréat du prix ClearlyRated Best of Staffing® tant pour le service client que pour les talents.
Actalent est un employeur souscrivant au principe de légalité des chances et accepte toutes les candidatures sans tenir compte de la race, du sexe, de lâge, de la couleur, de la religion, des origines nationales, du statut dancien combattant, dun handicap, de lorientation sexuelle, de lidentité sexuelle, des renseignements génétiques ou de toute autre caractéristique protégée par la loi.
Si vous souhaitez faire une demande daccommodement raisonnable, tel que la modification ou lajustement du processus de demande demploi ou dentrevue à cause dun handicap, veuillez envoyer un courriel à actalentaccommodation@actalentservices.com pour connaître dautres options daccommodement.
Ordonnance sur légalité des chances de San Francisco: Conformément à lOrdonnance sur légalité des chances de San Francisco, pour tous les postes situés dans la ville et le comté de San Francisco, nous examinerons les candidatures des personnes qualifiées ayant un casier judiciaire ou des antécédents criminels.
Utilisation de lintelligence artificielle (IA): Nous pouvons utiliser lintelligence artificielle (IA) pour soutenir certaines étapes de notre processus dembauche, notamment la recherche, la présélection et lévaluation des candidatures. LIA aide à analyser les candidatures et les qualifications, mais les décisions finales sont prises par notre équipe de recrutement. En soumettant votre candidature, vous reconnaissez et acceptez que celle-ci puisse être examinée à laide doutils dIA.
About Actalent
Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email actalentaccommodation@actalentservices.com for other accommodation options.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Use of Artificial Intelligence (AI):We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.
