Device OS Security Engineer — PKI & Firmware

Clover; Sunnyvale (CA); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Fuel Your Life

Paid holidays & time away

Mental health support

Professional growth & development

Employee Resource Groups

Job summary

Clover, a Fiserv company, seeks a Sr. Security & Test Engineer for Device OS (PKI & Firmware Security) to design and execute security validation across Clover POS devices. You’ll manage PKI/HSM trust architectures, secure boot, and mass manufacturing software while ensuring regulatory compliance.

You will collaborate with engineering, GRC, and product teams, drive vulnerability management, and advance secure CI/CD practices in a fast-paced hardware/software environment.

Qualifications

• 5+ years of professional experience in Software Security, PKI Engineering, AppSec, or Software QA/Testing.
• Deep hands-on experience with Public Key Infrastructure (PKI), Certificate & Key Management, and Hardware Security Modules (HSMs, e.g., Thales).
• Strong domain knowledge of security protocols, symmetric/asymmetric encryption, TLS/mTLS, and digital certificates.
• Experience with vulnerability management, security scanning tools, and risk assessments within Linux, Android (AOSP), or cloud/embedded infrastructure.
• Practical scripting skills (Python, PowerShell, or Bash) to automate security workflows, log extraction, and diagnostic testing.
• Familiarity with secure CI/CD pipelines, version control, and infrastructure orchestration (Jenkins, GitHub Actions, Terraform, Jira).
• Excellent communication skills with the ability to partner across engineering, GRC, and product teams to remediate findings.

Responsibilities

• Design, develop, and execute comprehensive security and testing strategies for the Device OS powering Clover Point of Sale devices.
• Manage and validate PKI infrastructure, Certificate Authority (CA) lifecycles, and Hardware Security Modules (HSMs) for secure device provisioning and key management.
• Take direct accountability for overall platform security, vulnerability management, and operational quality across Clover hardware product lines.
• Interpret PCI-PTS and PCI-PIN specifications to design and execute compliance, penetration testing, and risk validation workflows.
• Audit and secure CI/CD build pipelines, automated deployments, and golden images to maintain end-to-end supply chain security.
• Troubleshoot complex issues related to embedded cryptography, TLS/mTLS, certificate lifecycle tools, and secure bootloaders.

Skills

Software Security

PKI Engineering

AppSec

Software QA/Testing

Scripting (Python|PowerShell|Bash)

CI/CD security

Security protocols TLS/mTLS

Tools

Jenkins

GitHub Actions

Terraform

Jira

Android AOSP

BurpSuite

Metasploit

Wiz

AWS SSM

Job description

Clover, a Fiserv company, seeks a Sr. Security & Test Engineer for Device OS (PKI & Firmware Security) to design and execute security validation across Clover POS devices. You’ll manage PKI/HSM trust architectures, secure boot, and mass manufacturing software while ensuring regulatory compliance.

You will collaborate with engineering, GRC, and product teams, drive vulnerability management, and advance secure CI/CD practices in a fast-paced hardware/software environment.