key-management jobs in San Diego

Design and build secure cryptographic services—including key management, PKI, and secrets distribution—for a large-scale multi-tenant SaaS platform. Apply ML/AI techniques to detect cryptographic misuse and anomalies in near real time.…See more Operate services on Kubernetes, manage CI/CD pipelines, and respond to security incidents. Requires 4+ years of production software engineering experience, advanced knowledge of distributed systems and cryptographic primitives, and demonstrated security-conscious coding practices.

Design and build secure cryptographic services (key management, PKI, secrets distribution) for ServiceNow's multi-tenant SaaS platform, ensuring FIPS compliance and regulated-environment requirements. Apply ML/statistical techniques to detect cryptographic misuse, anomalies in key usage, and suspicious access patterns in near real-time.…See more Operate services on Kubernetes, manage CI/CD pipelines, handle on-call duties, and collaborate with security architects to translate compliance requirements into production code. Requires 4+ years of production software engineering (Java, Go, or equivalent OO language), deep knowledge of distributed systems and cryptographic primitives, and hands-on Kubernetes deployment experience.

Design, deploy, and manage enterprise backup solutions for Navy mission systems with primary responsibility for Commvault administration. Support backup and restore workflows across Windows Server and VMware vSphere environments, automate routine operations with PowerShell, and troubleshoot production issues.…See more Requires 8+ years of enterprise backup platform experience with hands-on Commvault administration, 5+ years supporting Windows Server networks, and 2+ years operating VMware vSphere environments.

AMD is seeking an AI Systems Security Architect to drive system-wide threat modeling and security analysis across hardware, firmware, and software platforms. The role involves designing secure debug architectures, writing platform security specifications, and leveraging AI-assisted engineering tooling to accelerate security analysis.…See more The ideal candidate has deep expertise in computer architecture, confidential computing, root of trust, boot chain architecture, firmware security, cryptography, and threat modeling at platform scope, with proficiency in C/C++ and experience securing AI/ML workloads at datacenter scale.

Design, deploy, and maintain enterprise-scale Commvault backup solutions supporting mission-critical national defense infrastructure. Engineer data protection strategies, hardened configurations, and runbooks while collaborating across technology teams.…See more Provide technical expertise in backup operations, disaster recovery, and cloud/datacenter modernization. Requires 8+ years administering enterprise backup platforms (primarily Commvault), 5+ years Windows Server support, 2+ years VMware vSphere and PowerShell scripting experience.

As a Backup Systems Engineer, you will design, document, and maintain enterprise-scale Commvault backup solutions for mission-critical national defense infrastructure. You'll support backup operations, develop hardened configurations, maintain runbooks and architecture documentation, and provide technical training across technology teams.…See more The role requires 8+ years administering enterprise backup platforms (primarily Commvault), 5+ years with Windows Server, and 2+ years with VMware vSphere and PowerShell scripting. You'll also contribute to cloud and datacenter modernization efforts and may travel OCONUS up to three times annually.

Design, deploy, and support enterprise backup and recovery systems for the U.S. Navy using Commvault, Windows Server, VMware vSphere, and Azure.…See more Administer backup platforms at scale, including CommCell, Media Agents, deduplication, encryption, and air-gap/immutability configurations. Develop best-practice data protection strategies, hardened installation procedures aligned to Navy standards, and provide troubleshooting and optimization support for mission-critical workloads. Required: 8+ years administering enterprise backup platforms, 5+ years supporting Windows Server production environments, 2+ years operating VMware vSphere, 2+ years PowerShell scripting, and DoD 8570.11 IAT Level II certification.

Software engineer responsible for the full software development lifecycle in a maritime cybersecurity environment, from requirements gathering through deployment. Design and develop scalable, distributed applications using Java, C#, Python, C++, and serverless architecture while applying cryptography, network security, endpoint security, and computer network defense principles.…See more Write clean, well-documented code; test and debug applications; and collaborate with security specialists, clients, and technical stakeholders to deliver defensive capabilities and situational awareness tools.

Design and build on-device security systems for Snap's Specs wearable devices, including permissions, access control, sandboxing, and trusted execution boundaries. Develop security and privacy controls for on-device AI features, focusing on model integrity, sensitive data handling, and inference-time protections.…See more Research and implement security features across Snap OS, firmware, applications, and cloud-connected surfaces. Improve fuzzing infrastructure, automated security testing, and continuous validation pipelines for OS components, IPC mechanisms, and AI data flows.

Lead cybersecurity and compliance activities for classified DoD and Special Access Program Information Systems. Manage Risk Management Framework (RMF) authorization packages, security control assessments, and continuous monitoring.…See more Coordinate with Security Control Assessors, Authorizing Officials, and Program Security Officers to achieve and maintain authorization to operate (ATO). Evaluate vulnerabilities, security deficiencies, and risks while developing mitigation strategies in a fast-paced, regulated environment.

Design and develop secure provisioning and test software for Amazon's custom silicon, focusing on OTP/eFuse programming, cryptographic key injection, and debug-access flows. Own the full lifecycle from ATE integration with HSMs and key-management systems through post-provisioned device validation, ensuring secure boot and device identity provisioning at scale.…See more Build reusable ATE libraries, test utilities, and automation frameworks using Python and/or C/C++, applying strong software engineering practices and collaborating with ASIC design, DFT, and security teams. Lead technical and security reviews, identify gaps throughout the product lifecycle, and drive best practices across the team.

Design and develop secure provisioning and test software for Amazon's custom silicon, focusing on OTP/eFuse programming, cryptographic key injection, and debug-access flows. Own the full lifecycle from ATE integration with HSMs and secure provisioning systems through RMA debug validation, while architecting reusable test libraries and automation tooling.…See more Partner across ASIC design, DFT, security, and firmware teams to ensure devices meet security and manufacturability standards. Lead technical reviews, mentor engineers, and drive security best practices across the silicon test organization.

Software Engineer responsible for the full software development lifecycle in a maritime cybersecurity environment, from requirements gathering through deployment. Must design and build scalable, distributed applications using Java, C#, Python, or C++, with strong expertise in cybersecurity principles, crypto/key management, network security, endpoint security, and computer network defense.…See more Role requires knowledge of serverless architecture, event-driven design, software testing, debugging, and code optimization, plus the ability to work with cross-functional teams including security specialists and end-users.

This Security Engineer role owns continuous cloud security posture management (CSPM) and vulnerability management across AWS accounts, detecting misconfigurations and driving remediation at scale. The person will build reusable Terraform modules, Service Control Policies, and policy-as-code guardrails to make secure-by-default infrastructure; design least-privilege IAM; govern secrets and encryption; and build cloud-native detections (CloudTrail, GuardDuty, Config, Security Hub) with automated remediation.…See more They'll map technical controls to compliance frameworks (CMMC, NIST SP 800-171, FedRAMP), support the SOC team investigating cloud incidents, and feed findings back into new guardrails. The role requires 3+ years of hands-on cloud security or DevSecOps experience, strong AWS expertise, Terraform and policy-as-code proficiency, and the ability to obtain a U.S. security clearance.

Lead a comprehensive security architecture program for Logos Space's ground-based satellite terminals, with technical ownership of end-to-end security design across mmWave apertures, RF/baseband subsystems, and baseband hardware. Design and implement RF-related datalink security, secure wireless protocols, threat models, and secure provisioning workflows while ensuring compliance with FIPS and other cryptographic standards.…See more Mentor security engineers, oversee manufacturing security and chain-of-custody processes, and collaborate with hardware and RAN teams to integrate security controls. This is a hands-on role with potential to build a team, requiring 7–10 years of embedded security experience, proficiency in C/C++/Rust and Python, and deep knowledge of threat modeling, secure boot, firmware security, and anti-tampering mechanisms.

Design and implement security and privacy controls for on-device AI features on Snap OS, including model integrity, secure data handling, inference-time privacy protections, and sensor access controls. Research and develop security features across firmware, applications, system services, and cloud-connected device surfaces.…See more Improve fuzzing infrastructure, automated security testing, and continuous validation pipelines for OS components, IPC mechanisms, parsers, drivers, firmware, and AI data flows. Requires 5+ years developing production software in C, C++, or Rust and 3+ years building security or platform protection features for Linux-based, embedded, mobile, or wearable systems.

Join Humanoid's Platform Infrastructure team as a Software Engineer focused on device security and identity. You'll design and implement the cryptographic chain of trust, secure boot pipelines, key management infrastructure, and certificate lifecycle management that ensures only trusted software runs on trusted hardware across their fleet of humanoid robots.…See more Working alongside senior engineers, you'll write production-quality backend and automation code spanning factory provisioning to cloud infrastructure, collaborating across firmware, applications, cloud, and operations teams. This role requires 5+ years of professional experience, strong CS fundamentals, proficiency in Python, C/C++, TypeScript, or Rust, comfort with Linux, and the ability to work on-site in San Diego.

Design and own network security across Saronic's enterprise, on-premises, cloud, and maritime vessel communications infrastructure. Responsibilities include managing firewalls, segmentation, VPN/ZTNA, and wireless systems (Palo Alto, Cisco, Aruba); securing AWS VPC architecture in commercial and GovCloud; architecting secure vessel communications over cellular, RF, SATCOM, and mesh links with cryptographic key management; and building network observability and automation at scale.…See more Requires 5+ years of hands-on enterprise network security experience, production firewall and VPN operations, L3-L7 networking fundamentals, and the ability to obtain a U.S. security clearance.

Qualcomm is seeking an experienced SoC Security Architect to design and define next-generation security architecture for datacenter System-on-Chips, focusing on confidential computing platforms, secure debug, and manageability features. The role requires architecting foundational security capabilities such as secure boot, attestation, hardware/firmware provenance, isolation, access control, and key management while ensuring compliance with industry standards.…See more The ideal candidate has 6+ years of hardware/systems engineering experience, deep knowledge of SoC architecture for datacenter environments, and proven expertise in threat modeling, security requirements development, and security architecture implementation. Strong analytical, problem-solving, and technical communication skills are essential for collaborating with platform architects and leadership across the organization.