• PQC Technical Planning: Define CNSA 2.0 and post-quantum cryptography requirements, migration plans, platform dependencies, and implementation priorities.

• Security Architecture: Develop technical specifications for firmware signing, secure boot, device identity, certificate chains, attestation, key management, and secure provisioning.

• Platform Integration: Coordinate PQC and security integration across BMC, BIOS, hardware Root of Trust, Caliptra, manufacturing infrastructure, PKI services, and management software.

• Technical Specifications: Create detailed product specifications, architecture diagrams, certificate profiles, provisioning flows, interface requirements, and acceptance criteria.

• PKI and Key Lifecycle: Define requirements for key generation, certificate enrollment, signing services, secure storage, rotation, revocation, recovery, and ownership transfer.

• Attestation Development: Drive technical requirements for SPDM, DICE, IDevID, DPE, device attestation, remote attestation, measurement signing, and evidence verification.

• Cross-Team Execution: Work with Hardware, Firmware, Software R&D, Validation, Manufacturing, IT, and external vendors to resolve design gaps and implementation dependencies.

• Design and Security Reviews: Conduct architecture reviews, threat modeling, cryptographic design reviews, and implementation-readiness assessments.

• Validation and Interoperability: Define test requirements and support interoperability, negative testing, certificate validation, cryptographic verification, and platform security validation.

• Issue Ownership: Investigate complex security, provisioning, certificate, and attestation issues and drive them to resolution with responsible engineering teams.

• Technology Evaluation: Evaluate cryptographic libraries, hardware capabilities, industry standards, vendor solutions, and implementation options for current and next-generation platforms.

• Customer Support: Provide technical support for customer RFQs, architecture discussions, compliance assessments, and security-feature deployment.

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Information Security, Cryptography, or a related field.

• 5+ years of experience in embedded systems, server firmware, platform security, cryptography, PKI, technical product engineering, or security architecture.

• Strong understanding of public-key cryptography, digital signatures, certificates, certificate chains, key lifecycle management, and secure provisioning.

• Working knowledge of post-quantum cryptography, including ML-DSA, ML-KEM, LMS/HSS, hybrid cryptography, or PQC migration considerations.

• Experience with platform-security technologies such as BMC, BIOS, secure boot, hardware Root of Trust, TPM, DICE, Caliptra, SPDM, MCTP, or remote attestation.

• Experience defining technical requirements and coordinating implementation across Hardware, Firmware, Software, Manufacturing, Validation, and IT infrastructure teams.

• Familiarity with standards and guidance such as CNSA 2.0, NIST FIPS 203/204/205, NIST SP *************, DMTF SPDM, TCG DICE, X.509, CMS, or RFC 3161 is preferred.

• Ability to review cryptographic architecture, provisioning flows, certificate profiles, protocol designs, and security-test results.

• Familiarity with OpenSSL, Linux, embedded Linux, Python, shell scripting, C/C++, or cryptographic test tools is preferred.

• Strong analytical and troubleshooting skills, including the ability to isolate issues across hardware, firmware, certificates, protocols, and infrastructure.

• Strong written and verbal English communication skills, with the ability to explain complex cryptographic and platform-security topics clearly.

• Experience working with semiconductor vendors, certificate authorities, manufacturing teams, cloud services, or enterprise customers is preferred.