Software Engineer

Stefanini North America and APAC; Dearborn (MI); On-site; USD 120,000 - 180,000; Full time

Job summary

Stefanini North America and APAC is seeking a Software Engineer in Dearborn, MI, specializing in PKI and secure API services to own the end-to-end lifecycle of mission-critical cryptographic systems for the connected vehicle product ecosystem.

You will design, build, deploy, and maintain high-assurance PKI and security service APIs that power certificate issuance, lifecycle management, revocation, and integration.

Qualifications

• Bachelor's degree or higher in Computer Science/Engineering or related field.
• Strong knowledge of PKI, X.509, PKCS standards and cryptographic algorithms.

Responsibilities

• Lead end-to-end PKI and Key Management services lifecycle for vehicle products.
• Design, build, deploy, and maintain secure RESTful APIs and cryptographic services.
• Implement security controls (OAuth/mTLS) and HSM integration.
• Define and enforce PKI certificate policies and profiles.
• Collaborate across on-premises and cloud Kubernetes environments.

Skills

PKI security

RESTful APIs

Java/.NET

cryptography

Cloud infrastructure

CI/CD

Security testing

OAuth/mTLS

HSM integration

Education

Bachelor's degree in Computer Science / Engineering

Tools

Kubernetes

OpenShift

PostgreSQL

Redis

MongoDB

Job description

Software Engineer, Dearborn, MI

We are seeking an exceptional Software Engineer specializing in Public Key Infrastructure (PKI) and secure API services to own the end-to-end lifecycle of mission-critical cryptographic systems. You will design, build, deploy, and maintain high-assurance PKI and security service APIs that power certificate issuance, lifecycle management, revocation, and integration for the connected vehicle product ecosystem.

Key Responsibilities

• Lead the full lifecycle of PKI and Key Management services supporting our vehicle products and ecosystem - lead customer requirements gathering, architecture design, implementation, testing, deployment, monitoring, and post-launch support.
• Design and develop robust, secure, and scalable RESTful APIs and web services for various features and use cases: CRL/OCSP, ACME, Certificate Issuance, message encryption/decryption, software signing, key rotation and certificate lifecycle management, HSM integration with PKCS11. Implement access control methods that enforce least privilege access principles using OAuth or mTLS.
• Implement and harden PKI and key services with deep knowledge of PKI industry standards, X.509, PKCS standards, elliptic curve cryptography (ECC) and RSA, post-quantum readiness, and hardware security module CSP integration. Apply hybrid encryption techniques with AES. Define and enforce PKI certificate policies and certificate profiles.
• Release and Deploy your apps through build server, CI/CD pipeline, and infrastructure involving on-premises and cloud Kubernetes.
• Monitor and address findings regularly in code base through SAST, DAST, software quality and security vulnerability scanning. Drive and support testing at each stage of the development process.

Skills Required

• Software Testing, PostgreSQL, Computer engineering, Software Development Lifecycle, Software Documentation, Application Development, Bouncy Castle Cryptographic, Cloud Infrastructure, Google Cloud Platform, .NET Core, .NET Developer, Cyber Security, C#, Application Testing, Agile Software Development

Skills Preferred

• Kubernetes, Technical Communication, Technical Requirements, Technical Documentation, Application Architect, Technical Analysis

Experience Required

• 6+ years of experience in IT with 4+ years in software engineering/development and secure coding practices using object oriented programming
• Strong knowledge and applicability of software architecture, development, methodologies and design principles including test-driven development
• Strong understanding and ability to apply cryptographic algorithms and standards in software, including RSA, ECC, AES, X.509
• Proven track record of owning customer-facing products from ideation to general acceptance, and flexibility to manage multiple projects and deliverables throughout lifecycle.

Experience Preferred

• 2+ years of experience deploying and maintaining cloud infrastructure with Kubernetes or OpenShift, and managing database instances (SQL Postgres, Redis, MongoDB)
• 2+ years building, maintaining, and integrating with production PKI systems and supporting cryptographic interfaces.
• Experience and understanding of industry security standards and applying them in our software solutions and processes, including NIST, OWASP, and relevant ISO and IEEE standards.
• Strong knowledge and applicability of software architecture, development, methodologies and design principles including test-driven development
• Familiarity with in-vehicle network architecture, modules, and protocols

Education Required

• Bachelor's degree in Computer Science / Engineering

Listed salary ranges may vary based on experience, qualifications, and local market. Also, some positions may include bonuses or other incentives***

Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face-to-face conversations will involve a description of the job for which you have applied. We will also speak with you about the process, including interviews and job offers.

About Stefanini Group

The Stefanini Group is a global provider of offshore, onshore and near shore outsourcing, IT digital consulting, systems integration, application, and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas, Europe, Africa, and Asia, and more than four hundred clients across a broad spectrum of markets, including financial services, manufacturing, telecommunications, chemical services, technology, public sector, and utilities. Stefanini is a CMM level 5, IT consulting company with a global presence. We are a CMM Level 5 company.