MathWorks is hiring a Senior Infrastructure Engineer to design, implement, and maintain systems that digitally sign software to ensure its authenticity and integrity. The role involves automating deployment of secure code signing infrastructure, performing security threat modeling, managing code signing certificates, and collaborating with development and security teams to integrate code signing into the software lifecycle.
Highlights
Automate deployment and maintenance of secure systems for code signing within CI/CD pipelines
Conduct security threat modeling and recommend mitigation strategies for integration systems
Manage production code signing certificates to validate software authenticity
Implement verification processes to ensure software integrity and trustworthiness
Develop comprehensive monitoring, logging, and alerting to ensure system reliability and security
Stay current on code signing and OS-level security requirements for release containers
Create and enforce security policies related to code signing and threat monitoring
Collaborate with developers and security teams to integrate code signing into software development
Debug customer code signing issues alongside product teams
Requires a bachelor's degree plus 6 years of experience or advanced degree equivalents
Technical skills include programming in C/C++ and Python, SCM tools (Git, Perforce), configuration management (Ansible, Chef, Puppet), debugging tools, and IT infrastructure design
Familiarity with certificate management, zero-trust architecture, secure software supply chains, and networking protocols (SMB, NFS) across Linux, Windows, MacOS
Experience with Software Defined Networking (SDN) considered a plus
MathWorks is seeking a code signing infrastructure engineer to help design, implement, and maintain the systems that digitally sign our software to ensure its authenticity and integrity. The ideal candidate will possess a strong understanding of cybersecurity, software development, and infrastructure management, leveraging experience in both software engineering and IT infrastructure to protect against tampering and ensure trust in our software.
Responsibilities
Use automation tools and frameworks to deploy and maintain the secure systems and infrastructure used for code signing as it is an integral process of our highly automated CI/CD pipeline
Perform security threat modeling for our different continuous integration systems and release pipelines to identify security issues and risks and recommend mitigation strategies
Procure and maintain the production code signing certificates used to sign MathWorks production products and release artifacts
Implement processes to verify that software is from a trusted author and has not been altered
Establish and utilize comprehensive monitoring, logging, and alerting systems to troubleshoot issues and proactively enhance system reliability and security
Stay on top of code signing and OS level security landscape and requirements associated with different release containers to ensure our release artifacts meet those security standards
Develop and enforce security policies related to code signing, monitoring for threats, and conducting security assessments
Work with software developers and security teams to integrate code signing into the software development lifecycle
Help product teams debug customer signing issues
Minimum Qualifications
A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.
Additional Qualifications
Experience programming and debugging in C/C++ and a scripting language like Python
Experience with SCM systems such as Git or Perforce
Experience with configuration management tools like Ansible, Chef, Puppet etc.
Demonstrate strong debugging skills (tracing tools like strace, dtrace,and bpftrace)
Experience in designing, building, and maintaining IT infrastructure, including servers, networks, and cloud environments
Familiarity with certificate management and the underlying technology for digital signatures
Familiarity with zero-trust architecture and secure software supply chain practices
Experience in networking filesystems protocols like SMB, NFS; working with Linux, Windows, and MacOS
Experience with Software Defined Networking (SDN) is a plus