Lumentum Logo

Lumentum

Senior Embedded Security Developer

Posted Yesterday
Be an Early Applicant
In-Office
Ottawa, ON, CAN
Senior level
In-Office
Ottawa, ON, CAN
Senior level
Designs, implements, and validates embedded security features for optical circuit switch platforms. Responsibilities include gNSI security services, authorization, credential and certificate management, secure zero-touch provisioning, device enrollment, TPM-backed attestation, measured boot, TLS/mTLS hardening, security automation, debugging, and supporting security reviews. The role requires embedded Linux development, cryptography, PKI, network-device security, and cross-platform troubleshooting.
The summary above was generated by AI

It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Lumentum Canada was awarded the 2022 National Capital Region’s Top Employers for the 6th consecutive year and the 2022 Career Directory Canada’s Best Employers for Recent Graduates for the 5th consecutive year.
 


About Lumentum

At Lumentum, we’re building the tech behind the world’s fastest networks and most advanced systems. Our optical and photonic solutions power everything from AI and cloud computing to data centers, telecom, and advanced manufacturing.

 

We’re a global team of innovators working where light meets technology, solving big challenges that keep the world connected and moving forward. If shaping the future of connectivity excites you, you’ll fit right in.


Why You’ll Love This Role

Lumentum is seeking a Senior Embedded Security Developer to design, implement, and validate security features for next-generation optical circuit switch platforms. This role focuses on device identity, secure provisioning, network management security, and hardware-rooted trust across the product lifecycle—from manufacturing and deployment through operation and recovery.


What You’ll Be Doing

  • Design, implement, and maintain gNSI security services and their operational commands and workflows, including authorization, path authorization, credential rotation, and certificate management.
  • Implement secure zero-touch provisioning (Bootz) and device enrollment workflows, including bootstrap identity, credential issuance, trust establishment, and recovery.
  • Develop device attestation capabilities using TPM-backed identity and measured-boot evidence, including collection and validation of platform measurements.
  • Implement and harden TLS and mutual TLS for control, telemetry, and management planes, including certificate issuance, rotation, revocation, and trust-bundle updates.
  • Build security tests and automation; investigate defects; and support internal and external security reviews.

What We’re Looking For


Education:
Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.


Experience:
Core Requirements:

  • 5+ years of embedded software development experience, including substantial work on security-sensitive systems.
  • Strong Python or Go development skills; familiarity with C or C++.
  • Experience developing for Linux-based embedded platforms; RTOS experience is a plus.
  • Practical experience with cryptography, PKI, TLS, and mutual TLS.
  • Understanding of network-device security and management protocols, such as gRPC, gNMI, or gNSI.
  • Experience designing or integrating secure provisioning, enrollment, credential management, or certificate lifecycle workflows.
  • Strong debugging skills and the ability to work across software and platform boundaries.
  • Clear written and verbal communication skills, including the ability to document designs and explain security decisions.

Preferred Qualifications

  • Experience implementing or operating gNSI services such as authz, pathz, credentialz, or certz.
  • Experience with secure zero-touch provisioning, device attestation, TPM 2.0, measured boot, or hardware-backed device identity.
  • Knowledge of secure boot chains, hardware roots of trust, or manufacturing security.
  • Experience in telecom, networking, optical systems, or other embedded infrastructure.
  • Familiarity with security testing, automation, and vulnerability review processes.

Perks You’ll Love

  • Flexible time off
  • Health and wellness benefits (physical and mental)
  • Tuition reimbursement and career growth support
  • A workplace built for you: free gym, games room, prayer room
  • Subsidized meals, free coffee/tea
  • Employee stock options and incentive plans
  • A collaborative, innovative, and inclusive culture

 

Salary Range
The salary range for this position is $110,000 - $140,000

Final compensation will be determined based on factors such as experience, skills, and qualifications. In line with our commitment to being a great place to work, Lumentum offers competitive total rewards which may include annual bonus, equity, and comprehensive health and welfare benefits.

 

Join a Team That’s Shaping the Future

At Lumentum, we’re more than just a workplace—we’re a launchpad for creativity and innovation. We’re committed to celebrating your unique talents and helping you grow. Our guiding principles—Innovate, Engage, Deliver, Excel, and Win—aren’t just words; they’re the heart of what we do.

 

Let’s Build a Brighter Future Together!

 

 

We’re committed to building an inclusive workplace where everyone feels valued and empowered. We welcome applicants from all backgrounds and provide accommodations for individuals with disabilities throughout the hiring process. Your uniqueness makes us stronger, sparks creativity, and drives our success.

Please contact us at [email protected] to request accommodation.

Join us—your future starts here!

Lumentum Ottawa, Ontario, CAN Office

61 Bill Leathem Drive, Ottawa, Ontario, Canada, K2J 0P7

Similar Jobs

Yesterday
In-Office
Ottawa, ON, CAN
Senior level
Senior level
3D Printing • Marketing Tech • Design
Designs, implements, and validates embedded security features for optical circuit switch platforms. Responsibilities include gNSI security services, authorization, certificate management, secure zero-touch provisioning, device enrollment, TPM-backed attestation, measured boot, TLS and mutual TLS, security testing, debugging, and supporting security reviews. The role requires strong Python or Go skills, embedded Linux development, cryptography, PKI, network-device security, and secure credential lifecycle experience.
Top Skills: BootzCC++CryptographyGnmiGnsiGoGrpcLinuxMeasured BootMutual TlsPkiPythonRtosTlsTpm 2.0
Entry level
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Leads regional response to high-impact payment fraud attacks across the Americas, including incident command, post-incident retrospectives, remediation recommendations, fraud intelligence coordination, and development of network-level security controls. Manages regional experts and translates fraud insights into standards and product enhancements for Mastercard’s security solutions. Requires deep payment fraud operations, analytics, intelligence, governance, and team leadership experience.
24 Minutes Ago
Hybrid
Senior level
Senior level
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Lead Mastercard’s Canadian pricing and interchange strategy, identifying revenue opportunities, evaluating financial and competitive impacts, developing pricing initiatives, and supporting commercial agreements. Present recommendations to senior management, supervise cost studies, create control frameworks and automation tools, and collaborate with Product, Finance, Technology, Legal, customers, and consultants. The role requires strategic thinking, rigorous analysis, financial modeling, stakeholder management, and execution within a complex matrix organization.

What you need to know about the Ottawa Tech Scene

The capital city of Canada and the nation's fourth-largest urban area, Ottawa has proven a rapidly growing global tech hub. With over 1,800 tech companies, many of which are leaders in their sectors, the city's tech talent now makes up more than 13 percent of its total workforce. This growth is driven not only by the big players like UL Solutions and Dropbox, but also by a thriving startup ecosystem, as new businesses emerge to follow in the footsteps of those that came before them.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account