At Blautech, we’re looking for a Senior Security/PKI Engineer to design and implement digital trust, cryptographic key protection, and device security for embedded and IoT solutions.
Your responsibilities
- Design and implement PKI and device identity solutions.
- Manage certificate issuance, provisioning, renewal, revocation, and expiration monitoring.
- Implement secure cryptographic key lifecycle processes, including generation, storage, rotation, and destruction.
- Integrate Hardware Security Modules (HSMs) and Trusted Platform Modules (TPMs).
- Implement secure boot, firmware signing, and integrity verification.
- Design or integrate IoT SAFE capabilities.
- Support secure device communications using TLS and mutual TLS.
- Design solutions aligned with applicable FIPS requirements and assess the use of validated cryptographic modules.
- Perform threat modeling and security architecture reviews.
- Collaborate with hardware, firmware, software, and operations teams.
What we’re looking for
- Proven hands-on experience in security engineering, PKI,
and applied cryptography.
- Strong knowledge of X.509 certificates, certificate authorities, and trust chains.
- Practical experience with HSMs and cryptographic key lifecycle management.
- Experience implementing secure boot and TPM-based security.
- Hands-on experience with embedded or IoT device security and IoT SAFE.
- Understanding of FIPS requirements and cryptographic module validation.
- Linux and scripting skills for security automation.
- Strong analytical skills, technical ownership, and clear documentation.
Work arrangement
- Remote, for candidates based in Latin America.
- Fully English-speaking work environment; professional fluency in spoken and written English is required.
- Availability to work aligned with U.S. Central Time (CT), following seasonal changes: CDT (UTC-5) during daylight saving time and CST (UTC-6) during standard time.