Senior Product Security Engineer
Rivian and Volkswagen Group Technologies3 months ago
Base Salary
$150k - $206k/yr
Responsibilities
- Own PKI and certificate lifecycle management, including certificate design, issuance, provisioning, renewal, revocation, trust stores, and certificate authorities.
- Apply EV charging PKI and communication standards, including ISO 15118 and OCPP, to support certificate provisioning and interoperability.
- Design and implement authentication and authorization flows using X.509, mTLS, OAuth2, and OIDC.
- Build and operate shared platform infrastructure using Kubernetes, service mesh, and workload identity technologies.
- Support secure boot, signature validation, key revocation, and secure-provisioning workflows.
- Deploy, monitor, and support production services using GitOps deployment and observability/tracing practices.
- Create design documentation and runbooks and mentor engineers on PKI and platform concepts.
Requirements
- At least 5 years of security engineering experience with hands-on, production PKI and certificate lifecycle management experience.
- Strong understanding of public-key cryptography, X.509 certificates, TLS/mTLS, and HSM/TPM-backed key storage.
- Production experience implementing authentication and authorization standards including X.509, mTLS, OAuth2, and OIDC.
- Familiarity with EV charging PKI or charging communication standards such as ISO 15118 and OCPP, or comparable domain-specific PKI experience.
- Proficiency in at least one backend language, such as Go or Python, and experience building and operating production services.
- Preferred experience with service mesh and workload identity technologies such as Istio, SPIRE/SPIFFE, or Cilium/eBPF.
- Preferred experience designing API gateway and ingress patterns, including mTLS termination and identity-provider integration.
- Preferred experience operating cloud infrastructure with metrics, tracing, and logging observability.
- Nice-to-have exposure to intrusion detection, distributed-system security monitoring, regulated or safety-critical industries, and cross-functional security architecture decisions.
Benefits
- Competitive base salary, annual company performance bonus eligibility, and equity in the form of Restricted Stock Units subject to applicable plan terms.
- Comprehensive benefits for full-time employees, including health coverage, retirement savings, time off, and family planning programs.
- Benefits offerings vary by country.
Tech Stack
Categories
About Rivian and Volkswagen Group Technologies
Rivian and Volkswagen Group Technologies is a 2024 joint venture building software and electrical architectures for software-defined electric vehicles. It develops in-vehicle operating systems, zonal controllers, connectivity, and cloud solutions used by Rivian and Volkswagen Group brands. The privately held company is headquartered in Palo Alto, CA, and focuses on creating a shared platform that can be integrated and licensed across multiple vehicle programs.