Firmware Security Certification Engineer

Description

The company is hiring a full-time Firmware Security Certification Engineer in Vancouver to give hands-on technical support for Common Criteria certification of Dune-based devices.

You will work with firmware engineering, security, networking, test, and certification teams to turn certification requirements into technical controls, repeatable evidence, and successful lab evaluations.

The ideal candidate knows Dune firmware well and is strong in networking, automation, scripting, troubleshooting, and explaining technical topics clearly.

Responsibilities

• Act as the technical subject-matter expert for Common Criteria certification of Dune-based devices.
• Review Security Targets, Protection Profiles, Security Functional Requirements, and assurance evidence needs, and map them to Dune firmware architecture and device behavior.
• Work with firmware and security architects to find gaps, set remediation plans, and confirm that implementations are ready.
• Configure, build, deploy, and troubleshoot Dune firmware in certification test environments.
• Build and maintain automated tests, scripts, utilities, and repeatable workflows that generate objective certification evidence.
• Run functional, security, negative, regression, and interoperability tests, including network protocol and secure communications testing.
• Find the cause of test failures in firmware, networking, services, authentication, cryptography, and device configuration.
• Write clear technical records: test procedures, results, defect reports, and answers to evaluator questions.
• Work directly with internal engineers and external evaluation labs to fix technical issues and keep certification on schedule.
• Make certification faster through reusable automation, documented methods, and earlier validation in the development lifecycle.

Requirements

• Hold a bachelor's degree in computer science, computer engineering, electrical engineering, cybersecurity, or a related technical field, or have equivalent hands-on experience.
• Have proven experience developing, integrating, debugging, or validating Dune firmware or a closely related embedded device platform.
• Understand embedded firmware architecture, operating system services, device configuration, logging, and diagnostics.
• Have practical networking skills, including TCP/IP, IPv4/IPv6, DNS, DHCP, HTTP/HTTPS, TLS, SNMP, 802.1X, certificates, and network troubleshooting.
• Have experience writing automated tests and scripts in Python, shell scripting, PowerShell, or similar languages.
• Can analyze complex technical requirements, isolate defects, reproduce issues, and carry them to closure across several teams.
• Have experience with source control, defect tracking, build environments, test frameworks, and continuous integration workflows.
• Communicate well in writing and speaking, producing precise technical evidence and explaining issues to engineers, evaluators, and program stakeholders.
• Can work on site or in a hybrid arrangement in Vancouver, as the team requires. Relocation will be offered.
• Nice to have: direct experience supporting a Common Criteria evaluation, such as Security Target development, evaluation evidence, evaluator interaction, vulnerability analysis, or certification maintenance.
• Nice to have: knowledge of Common Criteria concepts, Protection Profiles, assurance activities, and certification lab workflows.
• Nice to have: experience with enterprise printers, multifunction devices, embedded Linux, secure boot, cryptographic services, authentication, access control, audit logging, or secure update mechanisms.
• Nice to have: familiarity with packet capture and network diagnostic tools, security testing tools, and API or protocol test automation.
• Nice to have: experience building test harnesses, managing test data, and adding automated security tests to continuous integration pipelines.
• Nice to have: understanding of secure development lifecycle practices, threat modeling, vulnerability remediation, and security certification dependencies.

Conditions

Full-time role based in Vancouver, on site or hybrid as the team requires.

Pay ranges from $105,050 to $161,800 USD per year, with possible bonus and/or equity for United States candidates only. Pay depends on work location, job-related knowledge, skills, and experience.

No shift premium applies (United States of America).

Benefits

• Health, dental, and vision insurance.
• Short- and long-term disability insurance, life insurance, an employee assistance program, and a flexible spending account.
• Paid parental leave of 4 to 12 weeks, depending on tenure.
• 11 paid holidays.
• Flexible paid vacation and sick leave (see the US benefits overview).