2 days ago
Ottawa, CanadaSenior
Base Salary
$110k - $140k/yr
Responsibilities
- Design, implement, and maintain gNSI security services, operational commands, and workflows for authorization, path authorization, credential rotation, and certificate management.
- Implement secure zero-touch provisioning using Bootz and device-enrollment workflows covering bootstrap identity, credential issuance, trust establishment, and recovery.
- Develop device-attestation capabilities using TPM-backed identity and measured-boot evidence, including platform-measurement collection and validation.
- Implement and harden TLS and mutual TLS for control, telemetry, and management planes, including certificate issuance, rotation, revocation, and trust-bundle updates.
- Build security tests and automation, investigate defects, and support internal and external security reviews.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
- At least 5 years of embedded software development experience, including substantial work on security-sensitive systems.
- Strong Python or Go development skills and familiarity with C or C++.
- Experience developing for Linux-based embedded platforms; RTOS experience is a plus.
- Practical experience with cryptography, PKI, TLS, and mutual TLS.
- Understanding of network-device security and management protocols such as gRPC, gNMI, or gNSI.
- Experience designing or integrating secure provisioning, enrollment, credential-management, or certificate-lifecycle workflows.
- Strong debugging skills and ability to work across software and platform boundaries.
- Clear written and verbal communication skills, including documenting designs and explaining security decisions.
- Preferred qualifications include gNSI service experience, secure zero-touch provisioning, device attestation, TPM 2.0, measured boot, hardware-backed device identity, secure boot chains, hardware roots of trust, manufacturing security, telecom, networking, optical systems, embedded infrastructure, security testing, automation, and vulnerability-review processes.
Benefits
- Flexible time off.
- Health and wellness benefits covering physical and mental health.
- Tuition reimbursement and career growth support.
- Free gym, games room, prayer room, subsidized meals, and free coffee and tea.
- Employee stock options and incentive plans.
- Collaborative, innovative, and inclusive workplace culture.
About Lumentum
Lumentum designs and manufactures optical communications and photonic products—lasers, modules, and subsystems—for data center, telecom, industrial, and sensing applications. It sells to network equipment makers, cloud providers, and industrial OEMs, supporting AI infrastructure and advanced manufacturing. Founded in 2015 and headquartered in San Jose, California, Lumentum is publicly traded on NASDAQ (LITE) and operates R&D and manufacturing sites worldwide.