Senior PKI Software Engineer

N2 Services Inc; Dearborn (MI); On-site; USD 120,000 - 170,000; Full time

Job summary

N2 Services Inc in Dearborn, MI is seeking an experienced Software Engineer specializing in PKI, cryptography, and secure API services to join the Product Cybersecurity PKI & Key Management Security Services team.

The role owns the end-to-end lifecycle of mission-critical PKI and cryptographic services, designing, deploying, securing, and maintaining backend APIs and services for certificate issuance, key management, and lifecycle operations.

Qualifications

• Bachelor's Degree required.
• 6 years of IT experience.
• 4 years of software engineering/development experience.
• Strong experience with object-oriented programming and secure coding.
• Experience with at least one advanced or two programming languages.
• Strong knowledge of software architecture, development methodologies, and design principles.
• Hands-on experience with PKI and cryptographic technologies.
• Strong understanding of RSA, ECC, AES, X.509, PKCS standards.
• Experience developing REST APIs and backend services.
• Strong understanding of software testing and TDD.
• Experience with cloud infrastructure and application deployment.

Responsibilities

• Design, develop, deploy, and maintain secure RESTful APIs and backend microservices.
• Build and maintain production-grade PKI and certificate management systems.
• Implement certificate issuance, renewal, rotation, revocation, and lifecycle management.
• Work with CRL, OCSP, ACME, X.509, and PKCS standards.
• Develop applications integrating with Hardware Security Modules (HSMs) using PKCS#11.
• Implement cryptographic functionality using RSA, ECC, and AES.
• Develop secure services using C#, .NET Core, Java, Python.
• Deploy and maintain applications in cloud and on-premises Kubernetes/OpenShift environments.
• Work with databases including PostgreSQL, Redis, MongoDB.
• Implement secure authentication and access control using OAuth and mTLS.
• Apply secure coding practices and software architecture principles.
• Promote test-driven development (TDD), CI/CD, automated testing, and Agile development.
• Monitor application health, performance, security, and reliability.
• Support SAST, DAST, vulnerability scanning, and security remediation.
• Apply cybersecurity standards and best practices including NIST, OWASP, ISO, and IEEE standards.

Skills

PKI cryptography

REST APIs

Object-oriented programming

Secure coding

TDD CI/CD

OAuth mTLS

Kubernetes

OpenShift

RSA/ECC/AES

Cloud deployment

Education

Bachelor's Degree

Tools

PKCS#11

PostgreSQL

MongoDB

Redis

C#

Java

Python

Job description

Position Overview

We are seeking an experienced Software Engineer specializing in Public Key Infrastructure (PKI), cryptography, and secure API services to join the Product Cybersecurity PKI & Key Management Security Services team.

This role will be responsible for the end-to-end lifecycle of mission-critical PKI and cryptographic services supporting a connected-vehicle product ecosystem. The engineer will design, develop, deploy, secure, and maintain backend APIs and services responsible for certificate issuance, key management, certificate lifecycle management, revocation, and cryptographic operations.

Key Responsibilities

• Design, develop, deploy, and maintain secure RESTful APIs and backend microservices.
• Build and maintain production-grade PKI and certificate management systems.
• Implement certificate issuance, renewal, rotation, revocation, and lifecycle management.
• Work with CRL, OCSP, ACME, X.509, and PKCS standards.
• Develop applications that integrate with Hardware Security Modules (HSMs) using PKCS#11.
• Implement cryptographic functionality using RSA, ECC, and AES.
• Develop secure services using C#, .NET Core, Java, Python, or similar object-oriented languages.
• Deploy and maintain applications in cloud and on-premises Kubernetes/OpenShift environments.
• Work with databases including PostgreSQL, MongoDB, Redis, Oracle, or MySQL.
• Implement secure authentication and access control using OAuth and mTLS.
• Apply secure coding practices and software architecture principles.
• Promote test-driven development (TDD), CI/CD, automated testing, and Agile development.
• Monitor application health, performance, security, and reliability.
• Support SAST, DAST, vulnerability scanning, and security remediation activities.
• Apply cybersecurity standards and best practices including NIST, OWASP, ISO, and IEEE standards.
• Collaborate with architects, product owners, developers, security teams, and customers.
• Own products and services through the complete lifecycle, from requirements gathering through deployment and post-production support.

Required Qualifications

• Bachelor's Degree - Required

• 6 years of IT experience

• 4 years of software engineering/development experience

• Strong experience with object-oriented programming and secure coding

• Experience with at least one advanced or two programming languages

• Strong knowledge of software architecture, development methodologies, and design principles

• Hands-on experience with PKI and cryptographic technologies

• Strong understanding of:

• RSA

• ECC

• AES

• X.509

• PKCS standards

• Experience developing REST APIs and backend services

• Strong understanding of software testing and TDD

• Experience with cloud infrastructure and application deployment

Preferred Qualifications

• 2 years Kubernetes or OpenShift
• 2 years production PKI experience
• Experience integrating with HSM / PKCS#11
• Experience with PostgreSQL, Redis, and MongoDB
• Experience with C# / .NET Core
• Experience with NIST and OWASP
• Experience with OAuth / mTLS
• Knowledge of CRL, OCSP, ACME, certificate policies, and certificate profiles
• Experience with CI/CD pipelines and infrastructure automation
• Familiarity with in-vehicle network architecture, modules, and protocols
• Understanding of post-quantum cryptography/readiness

Key Technologies

PKI: X.509, CRL, OCSP, ACME, Certificate Lifecycle

Cryptography: RSA, ECC, AES, PKCS

HSM: PKCS#11

Programming: C#, .NET Core, Java, Python

Cloud/Infrastructure: Kubernetes, OpenShift, Cloud

Databases: PostgreSQL, Redis, MongoDB

Security: NIST, OWASP, ISO, IEEE, OAuth, mTLS

Development: REST APIs, Microservices, TDD, CI/CD, SAST, DAST, Agile

Ideal candidate: A senior backend/software engineer with strong hands-on PKI cryptography HSM secure API development experience, combined with Kubernetes/cloud deployment expertise.