Linux Cryptography and Security Engineer

Canonical; Christchurch; Remote; NZD 90,000 - 120,000; Full time

Job summary

Join a leading company in open source to leverage your software engineering and cryptography skills in enhancing Ubuntu's security foundation. Collaborate with internal and external stakeholders to develop solutions that ensure compliance with international security standards. This role offers the chance to influence security culture and technical delivery within a remote-first environment.

Benefits

Remote work environment

USD 2,000 annual learning and development budget

Recognition rewards

Holiday leave

Maternity/paternity leave

Employee Assistance Programme

Travel opportunities

Qualifications

• Hands-on experience with low-level Linux cryptography APIs.
• Strong C development experience.
• Experience with Linux system administration and shell scripting.

Responsibilities

• Collaborate with the Security Hardening team for security certifications.
• Enhance Linux cryptographic components for certification.
• Develop security hardening benchmarks and automation tools.

Skills

Linux cryptography

Software engineering

Communication

Tools

OpenSSL

GnuTLS

Python

Job description

This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant with international information security standards such as FIPS 140-3 and Common Criteria. You will apply your cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and collaborate with organizations like DISA and CIS to develop and implement security hardening benchmarks for Ubuntu.

As a member of the Security Hardening team, you will develop automation tools to audit deployed systems for DISA-STIG and CIS benchmark compliance. You will engage with internal and external stakeholders to identify gaps and develop solutions. This role offers the chance to influence team and security culture, facilitate technical delivery, and drive team direction, working closely with Canonical's kernel team and the wider engineering organization to impact all Ubuntu users.

Day-to-day responsibilities

1. Collaborate with the Security Hardening team to achieve and maintain various security certifications.
2. Enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, etc.) for FIPS and CC certification.
3. Work with external security consultants to test and validate kernel and crypto modules.
4. Develop security hardening benchmarks and automation tools for audit and remediation.
5. Contribute to Ubuntu mainline and upstream projects.
6. Communicate and collaborate internally and externally to improve security and deliver solutions.

What we are looking for in you

• Hands-on experience with low-level Linux cryptography APIs and debugging.
• Strong software engineering fundamentals, including C development experience.
• Experience with Linux system administration and shell scripting.
• Knowledge of security and cryptography fundamentals, with experience in secure coding.
• Experience working with open source libraries.
• Excellent communication skills for remote collaboration.

Additional Skills That You Might Also Bring

• Experience with FIPS/Common Criteria certified products.
• Experience with DISA-STIG or CIS benchmarks and related tooling.
• Experience with Linux Kernel development.
• Familiarity with Python, OVAL, and Ansible.
• Contributions to open source projects.

What we offer you

We offer competitive compensation based on location, experience, and performance, with annual reviews and bonuses. Benefits include:

• Remote work environment with in-person team sprints twice a year.
• USD 2,000 annual learning and development budget.
• Recognition rewards, holiday leave, maternity/paternity leave.
• Employee Assistance Programme.
• Travel opportunities and upgrades for company events.

About Canonical

Canonical is a leader in open source, publishing Ubuntu, a key platform for AI, IoT, and cloud. We operate globally with high standards, expecting excellence from our team. Since 2004, we have been remote-first, encouraging innovative thinking and continuous learning. Join us to be part of shaping the future of digital business.

Canonical is an equal opportunity employer committed to diversity and inclusion. We welcome applications from all backgrounds and experiences, ensuring fair consideration for every candidate.