> Markdown version of [/jobs/ext/2098900-senior-software-engineer-pki](https://www.wearedevelopers.com/jobs/ext/2098900-senior-software-engineer-pki). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Software Engineer - PKI - **Company:** Ford Motor Company - **Location:** Des Moines, IA, United States (Remote available) - **Experience:** Expert - **Salary:** $14,560.0 - $16,640.0 - **Contract:** Permanent contract - **Skills:** Testing (Software), Java (Programming Language), Application Programming Interfaces (APIs), C Sharp (Programming Language), C++ (Programming Language), Cloud Computing, Software Quality, Code Review, CompTIA Security+, Cyber Security, Databases, Continuous Integration, Digital Assets, Disaster Recovery, Fault Tolerance, Monitoring of Systems, Hardware Security Module, IEEE Standards Association, Python (Programming Language), Key Management, PostgreSQL, MongoDB, Network Architecture, OAuth, Object-Oriented Software Development, OpenShift, Open Web Application Security, Public Key Infrastructure, X.509, Software Architecture, Redis, RSA (Cryptosystem), Secure Coding, Secure Messaging, Software Engineering, Software Systems, SQL Databases, Systems Integration, Trusted Systems, Web Services, Data Logging, Test-Driven Development (TDD), Build Server, Git, Kubernetes, Information Technology, Restful APIs, Splunk, Software Version Control, Static Application Security Testing, Web Api, Dynamic Application Security Testing - **Published:** August 17, 2026 - **Apply:** https://www.juju.com/job/00000000gnmd0y ## About the Role + Bachelor's degree in Computer Science, Information Technology, OR a combination of education and experience + 5+ years of experience and proficiency in software engineering and secure coding practices using object oriented programming, including C#/C++, Java, Python or related languages + Experience and understanding of industry security standards and applying them in our software solutions and processes, including NIST, OWASP, and relevant ISO and IEEE standards. + Strong knowledge and applicability of software architecture, development, methodologies and design principles including test-driven development + Application of Identity and Access Management principles in software services + Strong software testing skills that result in lasting quality solutions at scale + Proficient version control of development and release branches in Git + 3+ years of experience deploying and maintaining cloud infrastructure with Kubernetes or OpenShift, and managing database instances (SQL Postgres, Redis, MongoDB) + 3+ years building, maintaining, and integrating with production PKI systems and supporting cryptographic interfaces. + Strong knowledge of PKI and Key Management best practices + Excellent understanding and application of cybersecurity algorithms, standards, and strategies including RSA, ECC, AES, X.509, PKCS#11, ACME, OCSP, CRL, HSM integration Even better, you may have... + CISSP or related cybersecurity certifications. + Proven track record of owning customer-facing products from ideation to general acceptance, and flexibility to manage multiple projects and deliverables throughout lifecycle. + Familiarity with in-vehicle network architecture, modules, and protocols are a plus. ## Description The Product Cybersecurity PKI & Key Mgmt Security Services team generates, distributes, stores, and manages lifecycle for the cryptographic keys in the vehicle product ecosystem. This includes developing and maintaining in-house APIs and web services to provide confidentiality, integrity and authenticity protection for various use cases and features in the product ecosystem. The Product Cybersecurity PKI & Key Mgmt Security Services team is directly engaged with the entire end-to-end solution for Vehicle Products and ecosystem, providing key management, PKI certificate lifecycle management and relative security services that support everything from ECU manufacturing to customer facing features. In addition to managing the product ecosystem cryptographic keys, the team develops and maintains various security API services built on the foundation and usage of cryptographic keys - including vehicle secure messaging from cloud, software signing, UDS diagnostics, EV charging and more. Our infrastructure cloud and on-premises servers and hardware security modules (HSM) running our services and powering our product PKI. We are seeking an exceptional Senior Software Engineer specializing in Public Key Infrastructure (PKI) and secure API services to own the end-to-end lifecycle of mission-critical cryptographic systems. You will design, build, deploy, and maintain high-assurance PKI APIs that power certificate issuance, lifecycle management, revocation, and integration for enterprise and cloud-native environments. This is not a support or maintenance role. You will own products, drive architecture, interface directly with customers, and deliver production-grade systems that protect billions in digital assets. The ideal candidate is a world-class software engineer who treats code as craft, thrives in ambiguity, has a deep understanding of foundational cybersecurity strategies and algorithms, and builds trusted relationships with security architects and product development teams. Key responsibilities include: + End-to-End Ownership: Lead the full lifecycle of PKI and Key Management API services supporting our vehicle products and ecosystem - lead customer requirements gathering, architecture design, implementation, testing, deployment, monitoring, and post-launch support. + Design and develop RESTful APIs and web services that are robust, secure, and scalable for various features and use cases: CRL/OCSP, ACME, Certificate Issuance, message encryption/decryption, software signing, key rotation and certificate lifecycle management, HSM integration with PKCS11. Implement access control methods that enforce least privilege access principles using OAuth or mTLS. + Cryptographic Engineering: Implement and harden PKI and key services with deep knowledge of PKI industry standards, X.509, PKCS standards, elliptic curve cryptography (ECC) and RSA, post-quantum readiness, and hardware security module CSP integration. Apply hybrid encryption techniques with AES. Define and enforce PKI certificate policies and certificate profiles. + Secure Systems Architecture: Design fault-tolerant, highly available PKI services with zero-downtime issuance, disaster recovery, and multi-region replication. + Infrastructure and CI/CD Integration: Release and Deploy your apps through build server, CI/CD pipeline, and infrastructure involving on-premises and cloud Kubernetes + Security & Compliance: Monitor and address findings regularly in code base through SAST, DAST, software quality and security vulnerability scanning. + Monitoring and Response: Actively assist in monitoring our systems and performing root cause analysis to address issues quickly. Implement robust application logging and integration with Splunk and security monitoring systems. + Define and lead best practices for our software development process, perform code reviews, and mentor engineers while remaining hands-on in the codebase. + Working with ECU embedded development teams to understand embedded architecture requirements and the best approach of key management for each ECU. + Authoring and managing technical cybersecurity requirements and process documentation ## Related Videos - [Reducing LLM Calls with Vector Search Patterns - Raphael De Lio (Redis)](https://www.wearedevelopers.com/videos/1714-reducing-llm-calls-with-vector-search-patterns-raphael-de-lio-redis) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Accelerating Authentication Architecture: Taking Passwordless to the Next Level](https://www.wearedevelopers.com/videos/733-accelerating-authentication-architecture-taking-passwordless-to-the-next-level) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [Car's are Technology on Wheels - Impact of Software and IT Competence in Automotive](https://www.wearedevelopers.com/videos/780-car-s-are-technology-on-wheels-impact-of-software-and-it-competence-in-automotive) ## Related Articles - [How software is steering vehicle technology](https://www.wearedevelopers.com/magazine/515-how-software-is-steering-vehicle-technology) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [Best Countries for Software Engineers](https://www.wearedevelopers.com/magazine/267-best-countries-for-software-engineers) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)