Staff PKI Engineer at Lucid Motors

Newark, California, United States -

Full Time

Start Date

Immediate

Expiry Date

07 May, 26

Salary

251460.0

Posted On

06 Feb, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Public Key Infrastructure, Certificate-Based Authentication, Encryption Protocols, SSL/TLS, Digital Certificates, Network Security, Firewall Configurations, VPN Technologies, Unix, RedHat Linux, Ubuntu, Python, Shell Scripting, MySQL, AWS Cloud Services, Messaging Queue Architecture

Industry

Motor Vehicle Manufacturing

Description

Leading the future in luxury electric and mobility At Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility. We plan to lead in this new era of luxury electric by returning to the fundamentals of great design – where every decision we make is in service of the individual and environment. Because when you are no longer bound by convention, you are free to define your own experience. Come work alongside some of the most accomplished minds in the industry. Beyond providing competitive salaries, we’re providing a community for innovators who want to make an immediate and significant impact. If you are driven to create a better, more sustainable future, then this is the right place for you. Staff Public Key Infrastructure Engineer In this role, you are embedded within the Brand’s Content Team as the Creative Lead for Motion to work cross-functionally within the various teams and departments at Lucid. As a Staff PKI Engineer, you will be working with the Vehicle Cybersecurity team, and you will have the opportunity to be a key member of Vehicle Cybersecurity Organization. **This role is located on-site at Headquarters in Newark, CA.** ROLE AND RESPONSIBILITIES: Maintaining a secure public key infrastructure to support certificate-based authentication and encryption. Implement and maintain Code Signing infrastructure. Managing and maintaining digital certificates, including certificate authorities, root certificates, and intermediate certificates. Ensuring compliance with industry standards and best practices such as NIST guidelines. Managing and monitoring the issuance, revocation, and renewal of certificates. Implementing and maintaining secure certificate-based authentication and encryption protocols, such as SSL/TLS. Collaborating with other larger product engineering teams to ensure that the PKI infrastructure is integrated with other systems and processes. REQUIRED QUALIFICATIONS: Bachelor's degree in the areas of Computer Science, Computer Engineering, Electrical Engineering or a related technical field is required. 7+ years of experience with public key infrastructure design and implementation. 6+ years of experience administrating and managing Hardware Security Modules(Eg: Thales) Strong understanding of certificate-based authentication and encryption protocols, such as SSL/TLS Experience designing PKI Architecture. Experience in creating and maintaining documentation for CA policies, procedures, and best practices to ensure consistency and transparency in CA operations Knowledge of industry standards and best practices. Thorough understanding of X.509 standard RFC 5820. Hands-on experience with digital certificate lifecycle management, including issuance, revocation, and renewal. Strong technical skills in network security, firewall configurations, and VPN technologies. Knowledge of security and risk assessment methodologies, vulnerability scanning, and penetration testing. Hands-on experience with Unix based OS such as RedHat Linux, Ubuntu. Experience with establishing and maintaining backup and disaster recovery procedures to ensure the availability and integrity of the CA's data and configurations in case of unexpected failures or disasters. Knowledge and experience with Prime key EJBCA and Sign Servers or other PKI applications such as Active Directory Certificate Services. Ability to work in a fast-paced, high-pressure environment and handle multiple projects simultaneously. Strong communication skills and ability to effectively interact with clients, stakeholders, and internal teams. Certifications in security, such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), are highly desirable. PREFERRED QUALIFICATIONS: Master's degree or higher education in the areas of Computer Science, Computer Engineering, Electrical Engineering or a related technical field. 10+ years of related experience Experience managing Primekey CA Stack. Experience specifically managing Thales HSMs. Experience writing Python, Shell based scripts. Experience managing MySQL Databases. Experience with different WebServices protocols such as RESTAPI Understanding of AWS Cloud Services. Experience with messaging queue architecture (eg: MQTT). At Lucid, we don’t just welcome diversity - we celebrate it! Lucid Motors is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under applicable State or Federal laws and regulations. Salary Range: The compensation range for this position is specific to the locations listed below and is the range Lucid reasonably and in good faith expects to pay for the position taking into account the wide variety of factors that are considered in making compensation decisions, including job-related knowledge; skillset; experience, education and training; certifications; and other relevant business and organizational factors. Base Pay Range (Annual) $171,500—$251,460 USD Additional Compensation and Benefits: Lucid offers a wide range of competitive benefits, including medical, dental, vision, life insurance, disability insurance, vacation, and 401k. The successful candidate may also be eligible to participate in Lucid’s equity program and/or a discretionary annual incentive program, subject to the rules governing such programs. (Cash or equity incentive awards, if any, will depend on various factors, including, without limitation, individual and company performance.) By Submitting your application, you understand and agree that your personal data will be processed in accordance with our Candidate Privacy Notice. If you are a California resident, please refer to our California Candidate Privacy Notice. To all recruitment agencies: Lucid Motors does not accept agency resumes. Please do not forward resumes to our careers alias or other Lucid Motors employees. Lucid Motors is not responsible for any fees related to unsolicited resumes.

Responsibilities

Maintain a secure public key infrastructure to support certificate-based authentication and encryption. Collaborate with product engineering teams to ensure PKI infrastructure integration with other systems.