Security Certification Engineer

SUSE; Milano; In loco; EUR 52.000 - 73.000; Tempo pieno

Descrizione del lavoro

SUSE is seeking a Security Certification Engineer to drive end-to-end security certification programs for its enterprise portfolio. You will leverage Linux OS, KVM-based virtualization, and containerized virtualization to build certified configurations, automate testing, and meet NIAP, BSI, and NIST requirements.

With 5+ years in software product development or related fields, you will collaborate across engineering teams, implement AI-assisted automation, and maintain rigorous security

Competenze

• 5+ years of total computing experience in software product development, academia, or FOSS communities.
• Excellent technical knowledge of Linux operating systems, hypervisor technology stacks (e.g., KVM), and containerized virtualization.
• Excellent proficiency in scripting languages (Bash, Python) and configuration management (Ansible).
• Solid experience with standard tracking systems (Jira, Bugzilla) and a strong capability to build, support, and operate within AI-assisted productivity workflows.
• Strong familiarity with security hardening, cryptographic standards, and compliance frameworks (OVAL, XCCDF, SCAP, STIGs).
• Good command of spoken and written English, with strong skills in maintaining meticulous technical compliance documentation.
• Bonus Skills: Programming and debugging experience in C; familiarity with physical security concepts (data centers, CCTV, access control lock systems).

Mansioni

• Certified Configurations: Build and rigorously test certified product configurations (specifically focusing on KVM virtualization based architectures), driving their compliance throughout the project cycle.
• Certification Automation & AI: Develop and maintain robust frameworks and AI-assisted automation tools for continuous security certifications and testing requirements.
• Engineering Requirements: Maintain and translate complex technical requirements defined by certification bodies (e.g., NIAP, BSI, NIST) into actionable engineering parameters.
• Testing Rigor: Maintain certification testing requirements and execution workflows, integrating them into automated environments and CI/CD pipelines.
• Cross-Functional Coordination: Coordinate closely with production engineering teams to implement architectural recommendations, mitigation strategies, and security findings from external certification labs.

Conoscenze

Linux OS

KVM Hypervisor

Containerization

Bash scripting

Python scripting

Ansible

Jira

Bugzilla

AI automation

Security hardening

Cryptography standards

OVAL/SCAP

English communication

Strumenti

Jira

Bugzilla

Ansible

Descrizione del lavoro

About Us

SUSE is a global leader of enterprise open source software. By transforming community innovations into secure, sovereign and AI-ready solutions, SUSE empowers customers to escape vendor lock-in and regain control of their IT destiny. Through industry-leading Linux, Kubernetes, Edge and AI infrastructure solutions, SUSE delivers the flexibility to innovate everywhere—from the data center to multi-cloud and out to the edge. Only SUSE also manages many Linux and Kubernetes distributions. At SUSE, Choice Happens because we prioritize community, interoperability and relentless innovation. Discover how we power mission-critical resilience at www.suse.com.

Security Certification Engineer

Job Description

Driving the technical execution of end-to-end security certification projects, ensuring our enterprise portfolio maintains high-assurance compliance. Leveraging deep technical expertise in Linux OS, cloud-native virtualization, KVM-based hypervisors, and containerized hyperconverged infrastructure (HCI), to build certified product configurations, develop AI-enabled automation tools, and bridge the gap between complex software architectures and strict certification evaluation requirements.

Responsibilities

• Certified Configurations: Build and rigorously test certified product configurations (specifically focusing on KVM virtualization based architectures), driving their compliance throughout the project cycle.


• Certification Automation & AI: Develop and maintain robust frameworks and AI-assisted automation tools for continuous security certifications and testing requirements.


• Engineering Requirements: Maintain and translate complex technical requirements defined by certification bodies (e.g., NIAP, BSI, NIST) into actionable engineering parameters.


• Testing Rigor: Maintain certification testing requirements and execution workflows, integrating them into automated environments and CI/CD pipelines.


• Cross-Functional Coordination: Coordinate closely with production engineering teams to implement architectural recommendations, mitigation strategies, and security findings from external certification labs.

Candidate Profile

• Experience: 5+ years of total computing experience in software product development industry, academia, or FOSS communities.


• Domain Expertise: Excellent technical knowledge of Linux operating systems, hypervisor technology stacks (e.g., KVM), and containerized virtualization.


• Automation & Scripting: Excellent proficiency in scripting languages (Bash, Python) and configuration management (Ansible).


• Tooling & Workflows: Solid experience with standard tracking systems (Jira, Bugzilla) and a strong capability to build, support, and operate within AI-assisted productivity workflows.


• Security Acumen: Strong familiarity with security hardening, cryptographic standards, and compliance frameworks (OVAL, XCCDF, SCAP, STIGs).


• Communication: Good command of spoken and written English, with strong skills in maintaining meticulous technical compliance documentation.


• Bonus Skills: Programming and debugging experience in C; familiarity with physical security concepts (data centers, CCTV, access control lock systems).

This position is subject to a background check(s), including criminal, credit, and/or employment references. The candidate is required to complete the background check(s) once an offer has been accepted. This will be conducted by SUSE’s external provider, where legally permitted.

As part of our commitment to pay transparency, we are sharing the expected total salary range associated with this role. This range includes the base salary and any applicable target bonus opportunity, subject to the terms of the relevant compensation plans and company policies. Please note that the salary range provided is intended only as a guideline. Individual offers may vary based on objective, non-discriminatory factors, including experience, skills, qualifications, geographic location, internal equity, and budget considerations. In addition to competitive compensation, we are proud to offer an attractive benefits package. Pay Range for Italy: €52,000.00 - €73,000.00

SUSE is a dynamic environment that is evolving rapidly, thus requiring agility, strong entrepreneurship and an open mind.

This is a compelling opportunity for the right person to join us as we continue to scale and prosper.

We empower you to be bold, driving your career to create the future you want. We celebrate and reward your achievements.

We give you the freedom to be yourself. You will work in a global community of unique individuals – like you – with different backgrounds, talents, skills and perspectives. A truly open community where everyone is welcome, has a voice and is encouraged to reach their full potential regardless of age, gender, race, nationality, disability, sexual orientation, religion, or any other characteristics.

SUSE Values

SUSE's culture is centered on four key values - Choice, Community, Trust, and Innovation - which are deeply integrated with our open source ethos. SUSE fosters a diverse and inclusive environment where our people are encouraged to be themselves.

Choice

• We are continuously making choice happen


• We are accountable for our choices


• We never get complacent

Community

• Nobody is smarter than everybody


• We embrace diversity of thought


• We are \"open source first, upstream first\" where collaboration benefits all

Trust

• We are trusted to deliver with integrity


• We offer trust by default, and do not wait for it to be earned


• We foster an environment where everyone trusts each other

Innovation

• We foster a culture of experimentation, and embrace change by challenging the norm


• We are committed to continuous improvement, creativity and adaptability


• Ideas are great, but without execution they are just ideas