Senior PKI & Crypto Backend Engineer

EPITEC; Dearborn (MI); Hybrid; USD 76,000 - 80,000; Full time

Job summary

EPITEC seeks a Software Engineer III to own PKI and key management security services, designing secure APIs, certificate lifecycle, and cryptographic systems for connected vehicle ecosystems. You will work across architecture, development, deployment, and monitoring, integrating PKI services with HSMs and cloud or on‑prem environments.

Responsibilities include building secure back-end services, managing PKI issuance and revocation, and ensuring robust authentication via OAuth and mTLS.

Qualifications

• Bachelor's Degree in Computer Science, Engineering, or related discipline.
• 6+ years of IT experience.
• 4+ years of software development experience utilizing object-oriented programming principles.
• Strong experience with C#, .NET Core, Java, Python.
• Experience developing RESTful APIs and backend services.
• Strong understanding of software architecture, design patterns, and secure coding practices.
• Hands-on experience with cryptographic technologies and standards including RSA, ECC, AES, X.509 Certificates, PKI Concepts.
• Experience owning products through the full software development lifecycle.
• Knowledge of Agile development methodologies and software testing practices.
• Experience with PostgreSQL or similar database technologies.
• Strong understanding of cybersecurity principles and application security.

Responsibilities

• Design, develop, and maintain secure back-end applications, APIs, and microservices.
• Build and support PKI services including certificate issuance, lifecycle management, revocation, CRL/OCSP services, and key rotation.
• Develop and maintain cryptographic services utilizing RSA, ECC, AES, X.509, PKCS standards, and Hardware Security Modules (HSMs).
• Integrate security services with HSMs using PKCS#11 and other cryptographic interfaces.
• Design and implement secure authentication and authorization mechanisms utilizing OAuth and mutual TLS (mTLS).
• Partner with customers and stakeholders to gather requirements and translate business needs into technical solutions.
• Deploy and manage applications in cloud and on-premises environments using CI/CD pipelines.
• Support Kubernetes-based environments and containerized deployments.
• Manage database integrations including PostgreSQL, MongoDB, Redis, and other database technologies.
• Drive application security through secure coding practices, SAST, DAST, vulnerability scanning, and security monitoring.
• Collaborate with architects, product owners, designers, and cross-functional engineering teams.
• Improve application resiliency, scalability, reliability, and disaster recovery capabilities.
• Promote Agile development practices including test-driven development (TDD), continuous integration, and continuous delivery.

Skills

C#

.NET Core

Java

Python

API & Microservices Development

Kubernetes / Cloud Infrastructure

PostgreSQL

Redis

MongoDB

HSMs

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Kubernetes

OpenShift

Google Cloud Platform

HSMs

PostgreSQL

MongoDB

Redis

Job description

EPITEC seeks a Software Engineer III to own PKI and key management security services, designing secure APIs, certificate lifecycle, and cryptographic systems for connected vehicle ecosystems. You will work across architecture, development, deployment, and monitoring, integrating PKI services with HSMs and cloud or on‑prem environments.

Responsibilities include building secure back-end services, managing PKI issuance and revocation, and ensuring robust authentication via OAuth and mTLS.