Responsibilities
- Interpret NDcPP and Common Criteria security requirements and convert them into development tasks.
- Implement security features involving cryptography, certificate management, authentication, audit logging, and access control using C/C++, Python, Bash, package patching, and configuration changes.
- Harden embedded Linux systems by configuring iptables, disabling insecure services, securing boot processes, and enforcing least-privilege port policies.
- Secure SSH, SNMPv3, syslog over TLS, authenticated NTP, and HTTPS configurations.
- Upgrade embedded Linux operating systems and packages to maintain security compliance and supportability.
- Monitor CVEs and security advisories and remediate vulnerabilities through upstream patches, package updates, or product fixes.
- Contribute to Common Criteria certification documentation, including Security Guides, Security Targets, and evaluation deliverables.
- Develop and maintain Python and Bash utilities for security workflows, testing, and automation.
- Maintain Jenkins packages, plugins, and build scripts and occasionally triage build failures.
- Work across the networking device and SDI router product codebase to improve security-sensitive designs and processes.
Requirements
- Diploma or degree in Computer Science, Computer Engineering, Cybersecurity, or a related field.
- 1–2 years of C/C++ development experience.
- 1–2 years of Python and Bash scripting experience.
- Ability to interpret security standards, protection profiles, and compliance documentation.
- Familiarity with TLS/SSL, X.509 certificates, authentication mechanisms, and cryptographic protocols.
- Basic understanding of Linux security management, firewall configuration, service hardening, and user and permission management.
- Familiarity with securing SSH, SNMP, syslog, NTP, and HTTPS.
- Experience tracking CVEs or security advisories and applying upstream patches or fixes.
- Experience with Jenkins or similar CI/CD tools.
- Strong analytical skills and attention to detail when working with security-sensitive code.
- Prior Common Criteria, NDcPP, or FIPS certification experience is preferred.
- Familiarity with Buildroot, Yocto, and embedded package management is preferred.
- Experience with secure C/C++ coding, including memory safety, input validation, and privilege management, is preferred.
- Awareness of Post-Quantum Cryptography concepts and emerging standards is preferred.
- Familiarity with Git or Subversion is preferred.
- CompTIA Security+, CompTIA Linux+, or similar certifications are preferred.
Benefits
- Employer-funded benefits program, competitive total compensation package, work-life balance, employee assistance plan, employee discount platform, career progression, casual work environment, social events, and sports teams.
- Monday-to-Friday schedule with 40 hours per week in Markham, Ontario.
About Evertz
Evertz Microsystems (TSX:ET) is a leading global manufacturer of broadcast equipment and solutions that deliver content to television sets, on-demand services, WebTV, IPTV, and mobile devices (like phones and tablets). Evertz has expertise in delivering complete end-to-end broadcast solutions for all aspects of broadcast production including content creation, content distribution and content delivery. Considered as an innovator by their customers, Evertz delivers cutting edge solutions that are unmatched in the industry in both hardware and software. Evertz delivers products and solutions that can be found in major broadcast facilities on every continent. Evertz’ customer base also includes telecommunications, satellite, cable TV, IPTV providers, and professional audio-visual, government, military, enterprise, and new media sectors. With over 2,000 employees, that include hardware and software engineers, Evertz is one of the leaders in the broadcast industry. Evertz has a global presence with offices located in: Canada, United States, United Kingdom, Germany, United Arab Emirates, India, Hong Kong, China,, and Australia. Evertz was named one of Canada’s 50 Best Managed Companies, which recognizes excellence in Canadian-owned and Canadian-managed companies. Canada’s 50 Best Managed Companies identifies Canadian corporate success through companies focused on their core vision, creating stakeholder value and excelling in the global economy.