Job Description

Salary: $68,000 - 108,000 per year Requirements:

• 6+ years of IT experience, including at least 4 years in software engineering or development and secure coding with object-oriented programming
• Bachelors degree in Computer Science or Engineering
• Strong knowledge of software architecture, development methodologies, design principles, and test-driven development
• Ability to apply cryptographic algorithms and standards in software, including RSA, ECC, AES, and X.509
• Track record of owning customer-facing products from ideation through general acceptance, with the flexibility to manage multiple projects and deliverables
• Skills in software testing, PostgreSQL, computer engineering, software development lifecycle, software documentation, application development and testing, Bouncy Castle Cryptographic, cloud infrastructure, Google Cloud Platform, .NET Core, C#, cybersecurity, and Agile software development
• Preferred skills include Kubernetes, technical communication, requirements and documentation, application architecture, and technical analysis
• Preferred experience includes 2+ years deploying and maintaining cloud infrastructure with Kubernetes or OpenShift and managing databases such as PostgreSQL, Redis, or MongoDB
• Preferred experience includes 2+ years building, maintaining, and integrating production PKI systems and supporting cryptographic interfaces
• Familiarity with security standards such as NIST, OWASP, and relevant ISO and IEEE standards is preferred
• Familiarity with in-vehicle network architecture, modules, and protocols is preferred

• Own the end-to-end lifecycle of PKI and key management services supporting vehicle products and their ecosystem, from customer requirements gathering and architecture through implementation, testing, deployment, monitoring, and post-launch support
• Design, develop, and maintain secure, scalable REST APIs and web services for certificate revocation and status, ACME, certificate issuance and lifecycle management, message encryption and decryption, software signing, key rotation, and HSM integration using PKCS#11
• Implement least-privilege access controls using OAuth or mutual TLS
• Apply PKI standards and practices, including X.509, PKCS standards, ECC, RSA, post-quantum readiness, HSM CSP integration, and hybrid encryption using AES
• Define and enforce PKI certificate policies and profiles
• Release and deploy applications through build servers and CI/CD pipelines across on-premises and cloud Kubernetes infrastructure
• Monitor code quality and security findings through SAST, DAST, and vulnerability scanning, and address identified issues
• Drive and support testing throughout each stage of development

• API
• C#
• CI/CD
• Cloud
• HSM
• Support
• Kubernetes
• MongoDB
• Network
• OWASP
• OAuth
• OpenShift
• PostgreSQL
• REST
• Redis
• Security
• Web
• ASP.NET
• Architect
• Cryptography
• DevOps
• Hardware
• SQL

More:

We are hiring a Software Engineer specializing in PKI and secure API services in Dearborn, Michigan, to support mission-critical cryptographic systems for a connected-vehicle ecosystem. Stefanini Group provides outsourcing, IT and digital consulting, systems integration, application services, and strategic staffing to Fortune 1000 enterprises. We operate across the Americas, Europe, Africa, and Asia, serving clients in a wide range of industries, and are a CMM Level 5 IT consulting company. Listed salary ranges may vary based on experience, qualifications, and local market, and some positions may include bonuses or other incentives. Our talent acquisition team discusses the role and hiring process with candidates by phone before making an employment offer.

last updated 41 week of 2026

Job Tags

Similar Jobs