Linux Cryptography and Security Engineer

This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant with international information security standards such as FIPS 140-3 and Common Criteria. You will leverage your applied cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and collaborate with organizations like DISA and CIS to develop and implement security hardening benchmarks.

As a member of the Security Hardening team, you will develop automation tools to audit systems for DISA-STIG and CIS benchmark compliance, interact with stakeholders to identify gaps, and create solutions to address these challenges. You will influence team and security culture, facilitate technical delivery, and help shape team strategies, working closely with Canonical's kernel team and broader engineering groups to impact all Ubuntu users.

Day-to-day responsibilities

1. Collaborate with the Security Hardening team to achieve and maintain various security certifications.
2. Enhance Linux cryptographic components like OpenSSL, Libgcrypt, and GnuTLS for FIPS and CC certification.
3. Work with external security consultants to test and validate kernel and crypto modules.
4. Develop security hardening benchmarks and automation for audit and remediation processes.
5. Contribute to Ubuntu mainline and upstream projects to benefit the community.
6. Engage with internal and external teams to improve security posture and deliver solutions efficiently.

Qualifications

• Hands-on experience with Linux cryptography APIs and debugging.
• Strong software engineering fundamentals, particularly in C programming.
• Experience with Linux system administration and shell scripting.
• Knowledge of security and cryptography principles, with experience in secure coding practices.
• Development experience with open source libraries.
• Excellent communication skills for remote collaboration.

Additional skills beneficial

• Experience with FIPS/Common Criteria certified products and standards.
• Experience with DISA-STIG or CIS benchmarks and related tooling.
• Work with Linux Kernel.
• Proficiency in Python, OVAL, and Ansible.
• Contributions to open source projects.

What we offer

We offer competitive compensation considering location, experience, and performance, with annual reviews and bonuses. Benefits include a flexible, remote-first work environment, a learning budget, recognition rewards, leave policies, and travel opportunities.

About Canonical

Canonical is a leader in open source, publishing Ubuntu, a key platform for AI, IoT, and cloud. We operate globally, uphold high standards, and promote excellence. Since 2004, we've been a remote-first company, encouraging innovative thinking and continuous learning.

Canonical is committed to diversity and equal opportunity, fostering an inclusive workplace that values all backgrounds and perspectives.