Security SW Engineer (PKI & Cryptographic Engi)

Systems Technology Group, Inc. (STG); Dearborn (MI); On-site; USD 110,000 - 160,000; Full time

Job summary

Systems Technology Group, Inc. (STG) in Dearborn, Michigan is seeking a Security SW Engineer (PKI & Cryptographic Engineering) to own the full PKI and key management lifecycle for vehicle products, from requirements to deployment and post-launch support.

You will design robust, secure RESTful services and integrate with HSMs, PKI policies, and cryptographic standards. The role emphasizes secure coding, TDD, end-to-end ownership, and collaboration across teams in an on-site corporate setting,

Qualifications

• 4+ years in software engineering and secure coding practices.
• Strong knowledge of software architecture, development methods and design principles including TDD.
• Strong understanding of cryptographic algorithms like RSA, ECC, AES and X.509.
• Proven track record owning customer-facing products from ideation to delivery.
• Lead full PKI and Key Management lifecycle for vehicle products and ecosystem.
• Design and develop secure RESTful APIs supporting CRL/OCSP, certificate issuance, and encryption.
• Implement access control with OAuth or mTLS.
• Cryptographic engineering: PKI, X.509, PKCS standards, ECC/RSA, HSM CSP integration.
• CI/CD and infrastructure integration with on-premises and cloud Kubernetes.
• Security and compliance: SAST/DAST and security testing throughout development.

Responsibilities

• Own the full lifecycle of PKI and Key Management services for our products.
• Gather customer requirements, design architecture, implement, test and deploy.
• Monitor, maintain and support post-launch operations.
• Develop robust, secure RESTful services for various use cases.

Skills

Secure coding practices

Object-oriented programming

Test-driven development

Cryptographic algorithms

PKI concepts

RESTful APIs

OAuth

Tools

CI/CD pipelines

Kubernetes

HSM integration

PKCS11

RSA

ECC

Job description

Title: Security SW Engineer (PKI & Cryptographic Engi)

STG is a fast-growing Digital Transformation services company providing Fortune 500 companies with Digital Transformation, Mobility, Analytics and Cloud Integration services in both information technology and engineering product lines. STG has a 98% repeat business rate from existing clients and have achieved industry awards and recognition for our services.

Experience Required:

• 4+ years in software engineering/development and secure coding practices using object-oriented programming.
• Strong knowledge and applicability of software architecture, development, methodologies and design principles including test-driven development.
• Strong understanding and ability to apply cryptographic algorithms and standards in software, including RSA, ECC, AES, X.509
• Proven track record of owning customer-facing products from ideation to general acceptance, and flexibility to manage multiple projects and deliverables throughout lifecycle.
• End-to-End Ownership: Lead the full lifecycle of PKI and Key Management services supporting our vehicle products and ecosystem — lead customer requirements gathering, architecture design, implementation, testing, deployment, monitoring, and post-launch support.
• Design and develop robust, secure, and scalable RESTful APIs and web services for various features and use cases: CRL/OCSP, ACME, Certificate Issuance, message encryption/decryption, software signing, key rotation and certificate lifecycle management, HSM integration with PKCS11.
• Implement access control methods that enforce least privilege access principles using OAuth or mTLS.
• Cryptographic Engineering: Implement and harden PKI and key services with deep knowledge of PKI industry standards, X.509, PKCS standards, elliptic curve cryptography (ECC) and RSA, post-quantum readiness, and hardware security module CSP integration.
• Apply hybrid encryption techniques with AES. Define and enforce PKI certificate policies and certificate profiles.
• Infrastructure and CI/CD Integration: Release and Deploy your apps through build server, CI/CD pipeline, and infrastructure involving on-premises and cloud Kubernetes
• Security & Compliance: Monitor and address findings regularly in code base through SAST, DAST, software quality and security vulnerability scanning. Drive and support testing at each stage of the development process.

Security SW Engineer (PKI & Cryptographic Engi) position is based at our corporate office located in Dearborn, Michigan. A great opportunity to experience the corporate environment leading personal career growth.

• For more information about STG, please visit us at www.stgit.com.