2 days ago
Ottawa, CanadaSenior
Base Salary
$110k - $140k/yr
Responsibilities
- Design, implement, and maintain gNSI security services, operational commands, authorization, path authorization, credential rotation, and certificate management workflows.
- Implement secure zero-touch provisioning and device enrollment workflows, including bootstrap identity, credential issuance, trust establishment, and recovery.
- Develop TPM-backed device attestation using measured-boot evidence and validate platform measurements.
- Implement and harden TLS and mutual TLS for control, telemetry, and management planes, including certificate issuance, rotation, revocation, and trust-bundle updates.
- Build security tests and automation, investigate defects, and support internal and external security reviews.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
- At least 5 years of embedded software development experience, including substantial work on security-sensitive systems.
- Strong Python or Go development skills and familiarity with C or C++.
- Experience developing for Linux-based embedded platforms; RTOS experience is a plus.
- Practical experience with cryptography, PKI, TLS, and mutual TLS.
- Understanding of network-device security and management protocols such as gRPC, gNMI, or gNSI.
- Experience designing or integrating secure provisioning, enrollment, credential management, or certificate lifecycle workflows.
- Strong debugging skills and ability to work across software and platform boundaries.
- Clear written and verbal communication skills, including design documentation and explanation of security decisions.
- Preferred qualifications include experience with gNSI services, secure zero-touch provisioning, device attestation, TPM 2.0, measured boot, hardware-backed identity, secure boot chains, hardware roots of trust, manufacturing security, telecom, networking, optical systems, security testing, automation, and vulnerability review processes.
Benefits
- Flexible time off.
- Health and wellness benefits covering physical and mental health.
- Tuition reimbursement and career growth support.
- Free gym, games room, and prayer room.
- Subsidized meals and free coffee and tea.
- Employee stock options and incentive plans.
- Collaborative, innovative, and inclusive workplace culture.
About Lumentum
Lumentum designs and manufactures optical communications and photonic products—lasers, modules, and subsystems—for data center, telecom, industrial, and sensing applications. It sells to network equipment makers, cloud providers, and industrial OEMs, supporting AI infrastructure and advanced manufacturing. Founded in 2015 and headquartered in San Jose, California, Lumentum is publicly traded on NASDAQ (LITE) and operates R&D and manufacturing sites worldwide.