Senior Product Security Engineer

The role

You will own PKI and certificate lifecycle management by designing, issuing, and managing digital identities. You will also build and operate platform infrastructure using Kubernetes and service mesh to secure authentication and authorization flows.

What you will do

• Own PKI and certificate lifecycle management
• Apply charging-standard expertise for EV charging PKI and protocols
• Design and implement authN/authZ using X.509, mTLS, OAuth2, and OIDC
• Build and operate platform infrastructure with Kubernetes and service mesh
• Support secure boot and key management
• Deploy, monitor, and support production services
• Write design docs and runbooks
• Mentor other engineers on PKI and platform concepts

Required qualifications

• 5+ years in security engineering with hands-on, production experience in PKI and certificate lifecycle management
• Strong grasp of public-key cryptography fundamentals: X.509 certificates, TLS/mTLS, HSM/TPM-backed key storage
• Working knowledge of authN/authZ standards (X.509, mTLS, OAuth2, OIDC)
• Experience implementing authN/authZ in production systems
• Familiarity with EV charging PKI or charging communication standards (e.g., ISO 15118, OCPP), or comparable domain-specific PKI experience
• Proficiency in at least one backend language (Go, Python, or similar)
• Experience building/operating production services

Nice to have

• Exposure to intrusion detection or broader security monitoring across distributed systems
• Experience in a regulated or safety-critical industry
• Track record contributing to cross-functional security architecture decisions at scale

Benefits

• Health coverage
• Retirement savings
• Time off
• Family planning programs

About the company

Rivian and Volkswagen Group Technologies is a joint venture between two industry leaders addressing electric vehicle challenges through technology like operating systems, zonal controllers, and cloud solutions.