Security Infrastructure Software Engineer - Cork, Ireland

About the Role

Are you an experienced Java developer with experience in creating Java-based server applications that use the most sensitive of security assets — cryptographic keys? We are looking for a passionate and skilled software engineer to join the development branch of Qualcomm's Cryptographic Operations Group. This team creates the services that support device image signing and factory provisioning with keys protected by Hardware Security Modules (HSMs) across the entire Qualcomm organisation. Our services our mostly exposed through Java implementations running on standalone, on-premises servers with attached HSMs which have to meet very high security and assurance requirements. 

You will be an integral part of a highly-skilled team and will contribute to all facets of the system: architecture, development, testing, integration, and debugging. You will also contribute to the architecture of Qualcomm's products by working with the device engineering teams about what is possible and efficient with our secure infrastructure systems.

Please note that this position is part of the Qualcomm engineering team. It is not a cybersecurity IT position.

What are we looking for?

• Proven programming skills with C and Python.

• Experience using build toolchains to support code base and working with multi-modular projects.

• Experience with 'C' targeting embedded environments (e.g., PowerPC architecture, ELF binary generation).

• Experience with SDLC using defined tools and processes.

• Experience using build frameworks like Maven or Gradle.

• General understanding of Source Code Management tools and practices, including use of tools like GIT

• General understanding of PKI.

• General understanding with CI/CD pipelines for automated build, sign, and publish workflows.

• Strong communication and documentation skills, and the ability to collaborate across geographically distributed teams.

An ideal candidate will be able to demonstrate the following additional skills and experience:

• Experience with Java development, and Java frameworks, including Spring, RESTEasy, JAXB, and JCA/JCE.

• Experience building, signing, and publishing native applications using Java-centric/Python-centric based toolchains in a cross-platform environment.

• Clear understanding of PKI/certificates, and cryptographic key management.

• Broad understanding of Web and REST API services.

• General understanding of UI frameworks.

• General understanding of interoperable data formats, like XML and JSON.

• Working experience with OpenSSL integration (1.x FIPS and 3.x) for various cryptographic operations.

• Working experience with PKCS11.

• Working experience with Hardware Security Module (HSM) platforms and associated toolchains for application signing and deployment.

• Hands-on experience with CI/CD pipelines for automated build, sign, and publish workflows.

• Familiarity with Post-Quantum Cryptography.

• Experience with Containerization concepts (using technologies Docker, Kubernetes, etc.)

Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail disability-accomodations@qualcomm.com or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries).