Senior Software Engineer – PKI
Posted 10hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Software Engineer securing Ford vehicle ecosystems through PKI, key management, and cryptographic APIs. Owning architecture, deployment, lifecycle management, and cybersecurity integration for production vehicle services.
Responsibilities:
- Lead the full lifecycle of PKI and Key Management API services for vehicle products and the ecosystem, including requirements gathering, architecture, implementation, testing, deployment, monitoring, and post-launch support
- Design and develop secure, robust, and scalable RESTful APIs and web services for CRL/OCSP, ACME, certificate issuance, encryption/decryption, software signing, key rotation, certificate lifecycle management, and HSM integration
- Implement least-privilege access controls using OAuth or mTLS
- Implement and harden PKI and key services using X.509, PKCS standards, ECC, RSA, AES, post-quantum readiness, and HSM CSP integration
- Define and enforce PKI certificate policies and profiles
- Design highly available, fault-tolerant PKI services with zero-downtime issuance, disaster recovery, and multi-region replication
- Release and deploy applications through build servers, CI/CD pipelines, and on-premises and cloud Kubernetes infrastructure
- Monitor and address codebase findings through SAST, DAST, software quality, and vulnerability scanning
- Perform monitoring and root-cause analysis; implement application logging and integrations with Splunk and security monitoring systems
- Define software development best practices, perform code reviews, and mentor engineers while remaining hands-on
- Work with ECU embedded development teams on architecture requirements and key-management approaches
- Author and manage technical cybersecurity requirements and process documentation
Requirements:
- Bachelor’s degree in Computer Science, Information Technology, or a combination of education and experience
- 5+ years of software engineering and secure coding experience using object-oriented programming with C#/C++, Java, Python, or related languages
- Experience applying NIST, OWASP, ISO, and IEEE security standards
- Strong knowledge of software architecture, development methodologies, and design principles including test-driven development
- Experience applying Identity and Access Management principles in software services
- Strong software testing skills
- Proficiency with Git version control for development and release branches
- 3+ years deploying and maintaining cloud infrastructure with Kubernetes or OpenShift and managing SQL Postgres, Redis, and MongoDB database instances
- 3+ years building, maintaining, and integrating production PKI systems and supporting cryptographic interfaces
- Strong knowledge of PKI and Key Management best practices
- Understanding and application of RSA, ECC, AES, X.509, PKCS#11, ACME, OCSP, CRL, and HSM integration
- Must be legally authorized to work in the United States
- CISSP or related cybersecurity certifications are advantageous
- Customer-facing product ownership experience and ability to manage multiple projects and deliverables are advantageous
- Familiarity with in-vehicle network architecture, modules, and protocols is a plus
Benefits:
- Immediate medical, dental, vision and prescription drug coverage
- Flexible family care days
- Paid parental leave
- New parent ramp-up programs
- Subsidized back-up child care
- Family building benefits including adoption and surrogacy expense reimbursement and fertility treatments
- Vehicle discount program for employees and family members and management leases
- Tuition assistance
- Established and active employee resource groups
- Paid time off for individual and team community service
- Generous schedule of paid holidays, including the week between Christmas and New Year’s Day
- Paid time off and option to purchase additional vacation time


















