Software Development & User Experience, KMS

HARMAN International; Santiago de Querétaro; Híbrido; MXN 600.000 - 800.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Employee discounts on Harman/Samsung

Training opportunities through HarmanU

Comprehensive wellness benefits

Be Brilliant recognition program

Inclusive and diverse work environment

Descripción de la vacante

HARMAN International in Querétaro is seeking a Security Engineer to join our Global KMS team, contributing to the design, development, and operation of foundational security services across our platform.

The role involves securing device provisioning, lifecycle management, and RoT capabilities, with responsibilities spanning API design, cryptographic key handling, and collaboration with manufacturing and software teams to enable secure, scalable hardware and software ecosystems.

Formación

• Bachelor’s or Master’s degree in Computer Science, Engineering, or Mathematics.
• 5+ years of industry experience in a software development or security engineering role.
• Solid working knowledge of Linux environments and command-line tools.
• Proficiency in C/C++, Java, and Python.

Responsabilidades

• Actively collaborate with product engineering, IT, and manufacturing teams to embed security in the product lifecycle.
• Design, deploy, and operate security infrastructure services (KMS, provisioning, CA, code-signing).
• Define APIs, protocols, and services for secure asset management and configuration.
• Develop and maintain policies for cryptographic key generation, handling, and access governance.
• Interface with manufacturing partners to support security provisioning activities.
• Partner with software teams to enable hosting platforms, tooling, SDKs, and integration components.
• Own day-to-day operation, reliability, and continuous improvement of security services.

Conocimientos

Linux

C/C++

Python

Java

Security engineering

Team collaboration

Educación

Bachelor's or Master's degree in Computer Science, Engineering, or Mathematics

Herramientas

PKCS#11 (Cryptoki)

Code-signing infrastructure

TLS/SSL configuration

HSMs (e.g., Utimaco, CloudHSM)

Reverse proxies (Nginx/Apache)

Descripción del empleo

About The Role

We are seeking a Security Engineer to join our Global KMS team, contributing to the development and operation of foundational security services across our platform landscape.

In this role, you will help design, maintain, and extend security infrastructure & services that underpin secure device provisioning, lifecycle management, and SOC‑integrated Root of Trust (RoT) capabilities. Your work will directly support Trusted Execution Environments (TEEs) and the trusted elements of the platform, ensuring robust, scalable, and secure manufacturing and deployment processes.

What You Will Do

• Actively collaborate with product engineering, IT, and manufacturing teams to embed security as a proactive and integral part of the product development lifecycle.
• Design, develop, deploy, and operate security infrastructure services, including key‑management systems, manufacturing provisioning services, certificate authorities, and code‑signing infrastructure.
• Define and implement APIs, protocols, and services for secure enumeration, configuration, and management of platform assets.
• Develop and maintain policies, procedures, and controls for cryptographic key generation, handling, lifecycle management, and access governance.
• Interface with manufacturing partners to support, troubleshoot, and debug security provisioning activities.
• Partner with software development teams to enable hosting platforms, tooling, SDKs, and integration components required for internal and external consumers.
• Own the day‑to‑day operation, reliability, and continuous improvement of security infrastructure services.

What You Need To Be Successful

• Bachelor’s or Master’s degree in Computer Science, Engineering, or Mathematics.
• 5+ years of industry experience in a software development or security engineering role.
• Solid working knowledge of Linux environments, including command‑line tools.
• Proficiency in C/C++, Java, and Python.
• Practical experience with HTTP(S) services, including reverse proxies (Apache or Nginx), VPNs, and SSL/TLS configuration.
• Foundational experience with Hardware Security Modules (HSMs) such as PKCS#11 (Cryptoki) interface usage, code‑signing services, secure payload decryption, certificate signing, and device‑identity generation.
• Ability to understand complex systems, particularly in vehicle architectures and manufacturing workflows.
• Strong understanding of security concepts such as secure key generation and delivery, access‑control mechanisms, token‑based authorization, and multi‑party authorization (e.g., n‑of‑m schemes).
• Working knowledge of cryptographic primitives and secure communication protocols.
• Clear and effective communication skills in English.
• Strong collaboration mindset, openness in communication, resilience, and a sense of ownership.

Bonus Points if You Have

• Automotive cybersecurity experience, ideally within a Tier‑1 supplier or OEM environment.
• Hands‑on operational experience with:
  • HSM deployment, maintenance, backup, and recovery.
  • Code‑signing infrastructure and access control systems.
  • Web services deployment and CI/CD pipelines.
• Experience with containerized and cloud‑native environments (Docker, Kubernetes, ECS).
• Familiarity with CloudHSM technologies.
• Experience with Utimaco HSMs, including firmware configuration or modification.
• Logging, monitoring, and observability experience (rsyslog, ELK stack, Logstash).
• Linux system hardening and access control (SELinux, AppArmor, SMACK, PAM, SSH, FIDO/U2F).
• Key‑provisioning experience for:
  • AUTOSAR (SHE).
  • Trusted Execution Environments (e.g., Trustonic / Kinibi).
• Practical experience with:
  • Microsoft SignTool.
  • Android APK/APEX signing processes.

What Makes You Eligible

• Be willing to travel up to 10%, both domestic and international.
• Ability to work from an office in Queretaro, 3+ days per week (hybrid).
• Successfully complete a background investigation and drug screen as a condition of employment.

Benefits

• Access to employee discounts on world‑class Harman and Samsung products (JBL, Harman Kardon, AKG, etc.).
• Extensive training opportunities through Harman University.
• Competitive wellness benefits.
• “Be Brilliant” employee recognition and rewards program.
• An inclusive and diverse work environment that fosters and encourages professional and personal development.

Equal Opportunity Employer

HARMAN is proud to be an Equal Opportunity employer. HARMAN strives to hire the best qualified candidates and is committed to building a workforce representative of the diverse marketplaces and communities of our global colleagues and customers. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. HARMAN attracts, hires, and develops employees based on merit, qualifications, and job‑related performance.