HPE Factory Build Process -DevID Software Engineer

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a HPE Factory Build Process – DevID Software Engineer based in the United States. Join a cybersecurity-focused engineering team responsible for developing and maintaining a critical Device Identity (DevID) service that provisions Public Key Infrastructure (PKI) certificates for hardware manufacturing and field deployment. In this role, you will contribute to secure, reliable software solutions that support device authentication and trusted hardware identities. You will collaborate with software architects, development leads, and international teams to enhance existing services, develop new features, and resolve technical issues. Your work will span backend development, applied cryptography, hardware security integration, automated testing, and continuous delivery. You will also help advance post-quantum cryptography capabilities as security standards evolve. This fully remote opportunity offers the chance to make a meaningful impact on enterprise cybersecurity while working on complex, security-critical systems.

Develop, maintain, and enhance the DevID service, including Go-based REST microservices that issue X.509 certificates for hardware manufactured in production facilities and devices deployed in the field. Collaborate with software architects and development leads to define technical requirements, refine product specifications, and deliver new functionality, code revisions, and bug fixes. Provide technical support for DevID-related issues, serving as a primary point of contact during US business hours and, when necessary, during late evenings and weekends. Investigate incidents, troubleshoot problems, and deliver timely resolutions or workarounds. Implement and maintain automated testing scripts, validate software changes, and ensure the quality, reliability, and security of new and existing functionality. Integrate cryptographic technologies and hardware security modules (HSMs), supporting RSA and post-quantum cryptographic operations, certificate management, and trusted platform capabilities. Maintain containerized Linux deployments, CI/CD pipelines, GitHub repositories, and multi-environment release workflows using appropriate development and deployment tools. Follow established coding standards, defect lifecycle processes, and build and release requirements while documenting enhancements and enabling reusable, shared source code. Develop proof-of-concept implementations and technical demonstrations to validate requirements and support design decisions. Participate in technical meetings, coordinate with distributed teams across the United States and internationally, and communicate progress, risks, and proposed solutions clearly. Provide timely weekly status reports, manage assigned tasks independently, and maintain a strong focus on quality, attention to detail, and continuous improvement. Leverage AI-assisted tools where appropriate to support specification development, coding, test validation, and software security monitoring. Requirements Work authorization: Must be a US citizen or hold a valid US Green Card, as required for this position. Professional experience: At least two years of relevant, documented technical experience in software development, maintenance, testing, and integration. Go development: Demonstrated experience developing and maintaining Go-based services, including pure-Go implementations, CGO build constraints, Linux and Windows hardware security module shims, interface design, and the standard library's cryptographic capabilities. Programming languages: Practical experience with Java and C for maintaining and enhancing legacy applications. Applied cryptography: Knowledge of X.509 certificate chains, RSA, and elliptic-curve cryptography (ECC). Familiarity with post-quantum cryptographic algorithms, including ML-DSA and ML-KEM, is highly valuable. Hardware security: Experience integrating hardware security modules for RSA and ML-DSA key operations, including partition management, key labels, and key object handling. Trusted Platform Module (TPM): Understanding of TPM 2.0 concepts, including Endorsement Key (EK) certificates, Attestation Keys (AKs), attestation workflows, and TPM public-area data parsing. Familiarity with Go TPM libraries is an advantage. Systems and infrastructure: Experience with Linux environments, Docker, NGINX, and system-level debugging, particularly for containerized production deployments. Database technologies: Experience working with MariaDB, Microsoft SQL Server, and MongoDB for certificate management, artifact tracking, or related applications. DevOps and source control: Proficiency with GitHub repositories, GitHub Actions, CI/CD pipeline maintenance, Docker multi-stage builds, container registries, and multi-environment deployment workflows. Cybersecurity awareness: A security-focused engineering mindset and familiarity with the Commercial National Security Algorithm (CNSA) 2.0 requirements and the transition toward post-quantum cryptography. Education: A bachelor's degree in computer science, engineering, or a related discipline, or equivalent professional experience. Communication and collaboration: Strong written and verbal communication skills, with the ability to explain complex technical concepts to technical teams and management. Must be comfortable working with geographically distributed teams. Personal effectiveness: Self-motivated, detail-oriented, proactive, and capable of managing priorities independently with minimal supervision. Demonstrates sound judgment, asks questions when needed, and communicates issues and improvement opportunities constructively. Working schedule: Availability during US business hours is required, with occasional late-evening and weekend support as operational needs arise. Preferred qualifications: At least six months of relevant experience in one or more of the following areas: Familiarity with IEEE 802.1AR DevID standards and device identity implementations. Experience with PKCS#11 and HSM technologies, including key objects, handle-versus-label semantics, partition management, and integration of post-quantum keys not yet supported by standard libraries. Experience with Thales Luna HSMs is a plus. Practical knowledge of TPM 2.0, EK certificates, AKs, attestation workflows, go-tpm , or go-attestation . Familiarity with raw TPM wire-format parsing, including TPMT_PUBLIC , and cryptographic implementations from the CRYSTALS algorithm family. Experience with application observability, monitoring, diagnostics, and operational troubleshooting. Familiarity with enterprise hardware platforms, including servers, storage systems, and networking switches. Experience using AI-assisted tools for software specification, code development, automated validation, and security monitoring. Benefits Competitive base salary: Annual salary range of $95,000–$218,500 for the position in Illinois, United States. Actual compensation depends on geographic location, experience, education, training, and skill level. Variable incentives may also be available. Remote work: Designated as a remote/teleworker position, allowing you to work primarily from home. Health and wellbeing: Access to a comprehensive benefits package designed to support physical, financial, and emotional wellbeing. Details are available through the employer's US benefits enrollment portal . Professional development: Opportunities to strengthen technical expertise, pursue career goals, and explore professional growth pathways. Inclusive workplace: A collaborative environment that values diverse backgrounds, individual perspectives, and equal employment opportunities. Technical impact: The opportunity to contribute to cybersecurity, device identity, certificate infrastructure, and emerging post-quantum cryptography initiatives. International collaboration: Work alongside engineering and security professionals across the United States and other global locations.