Senior PKI & Security Engineer for EV Charging

Rivian VW Group; Irvine, Northern (CA, KY); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Rivian VW Group Technologies is seeking a senior/staff security engineer who is a PKI expert, owning certificate lifecycle management end-to-end and bringing strong platform/infrastructure experience.

You will help run and modernize systems issuing, provisioning, and managing digital identity for products, with depth in charging standards (ISO 15118, OCPP) and authN/authZ (X.509, mTLS, OAuth2, OIDC).

Qualifications

• 5+ years in security engineering with PKI and certificate lifecycle management (issuance, provisioning, renewal, revocation).
• Strong grasp of X.509, TLS/mTLS, and related crypto fundamentals.
• Experience with authN/authZ standards (X.509, mTLS, OAuth2, OIDC) in production.
• Familiarity with EV charging PKI or ISO 15118/OCPP contexts.
• Proficiency in at least one backend language (Go or Python) and building/operating production services.

Responsibilities

• Own PKI and certificate lifecycle management across systems; manage trust stores and CAs.
• Apply charging-standard expertise (ISO 15118, OCPP) for certificate provisioning and interoperability.
• Design and implement authN/authZ using X.509, mTLS, OAuth2, and OIDC.
• Build and operate platform infrastructure with Kubernetes, service mesh, and workload identity tech.
• Support secure boot and key management, including signature validation and revocation workflows.
• Operate deployed services with GitOps, observability, and incident response.
• Document designs and runbooks; mentor engineers on PKI and platform concepts.

Skills

PKI expertise

Certificate lifecycle

TLS/mTLS

OAuth2/OIDC

Kubernetes

Service mesh

Backend Go/Python

EV charging PKI

Tools

Kubernetes

Istio

SPIRE/SPIFFE

Cilium/eBPF

HSM/TPM

Job description

Rivian VW Group Technologies is seeking a senior/staff security engineer who is a PKI expert, owning certificate lifecycle management end-to-end and bringing strong platform/infrastructure experience.

You will help run and modernize systems issuing, provisioning, and managing digital identity for products, with depth in charging standards (ISO 15118, OCPP) and authN/authZ (X.509, mTLS, OAuth2, OIDC).