Sr. Public Key Infrastructure (PKI) Engineer

Leading the future in luxury electric and mobilityAt Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility. We plan to lead in this new era of luxury electric by returning to the fundamentals of great design – where every decision we make is in service of the individual and environment. Because when you are no longer bound by convention, you are free to define your own experience. Come work alongside some of the most accomplished minds in the industry. Beyond providing competitive salaries, we’re providing a community for innovators who want to make an immediate and significant impact. If you are driven to create a better, more sustainable future, then this is the right place for you.
As a Sr. PKI Engineer, you will be working with Vehicle Cybersecurity team, and you will have the opportunity to be a key member of Vehicle Cybersecurity Organization. This role is located on-site at Headquarters in Newark, Ca.

ROLE AND RESPONSIBILITIES

• Designing, implementing, and maintaining a secure public key infrastructure to support certificate-based authentication and encryption.
• Design, implement and maintain Code Signing infrastructure.
• Performing Key Ceremonies on Hardware Security Modules.
• Managing and maintaining digital certificates, including certificate authorities, root certificates, and intermediate certificates.
• Ensuring compliance with industry standards and best practices such as NIST guidelines.
• Managing and monitoring the issuance, revocation, and renewal of certificates.
• Implementing and maintaining secure certificate-based authentication and encryption protocols, such as SSL/TLS.
• Providing technical support and guidance to clients, stakeholders, and internal teams on certificate-based authentication and encryption issues.
• Staying up-to-date with advancements in the field and incorporating new technologies and best practices into the PKI infrastructure as needed.
• Participating in security and risk assessments, performing vulnerability scans and penetration testing, and implementing remediations as needed.
• Documenting processes, procedures, and systems, and creating reports for management.
• Document, and maintain Certificate Policy, Certificate Practice Statements, and other critical documents.
• Creating and managing Registration Authorities.
• Collaborating with other larger product engineering teams to ensure that the PKI infrastructure is integrated with other systems and processes.

REQUIRED QUALIFICATIONS:

• Bachelor's degree in Computer Science, Information Technology
• 6-9 years of experience with public key infrastructure design and implementation.
• 3-5 years of experience administrating and managing Hardware Security Modules.
• Strong understanding of certificate-based authentication and encryption protocols, such as SSL/TLS.
• Knowledge of industry standards and best practices.
• Hands-on experience with digital certificate management, including issuance, revocation, and renewal.
• Strong technical skills in network security, firewall configurations, and VPN technologies.
• Knowledge of security and risk assessment methodologies, vulnerability scanning, and penetration testing.
• Hands-on experience with Unix based OS such as RedHat Linux, Ubuntu.
• Knowledge and experience with EJBCA and Sign Servers or other PKI applications such as Active Directory Certificate Services, and OpenSSL CA.
• Ability to work in a fast-paced, high-pressure environment and handle multiple projects simultaneously.
• Strong communication skills and ability to effectively interact with clients, stakeholders, and internal teams.
• Certifications in security, such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH), are highly desirable.

Preferred Qualifications:

• Experience managing EJBCA applications.
• Experience specifically managing Thales HSMs.
• Experience writing Python, Shell based scripts.
• Experience managing MySQL Databases.
• Experience with different WebServices protocols such as RESTAPI.

Salary Range: The compensation range for this position is specific to the locations listed below and is the range Lucid reasonably and in good faith expects to pay for the position taking into account the wide variety of factors that are considered in making compensation decisions, including job-related knowledge; skillset; experience, education and training; certifications; and other relevant business and organizational factors. ·       California (Bay Area) -