[Hiring] HPE Factory Build Process -DevID Software Engineer @Hewlett Packard Enterprise

Role Description

This role has been designated as ‘Remote/Teleworker’, which means you will primarily work from home.

The position is with the Product Security Office Team located within the Cybersecurity and Digital Risk Management organization. The position is responsible for providing coding and user support for the DevID service; a key component of HPE Factory Build process, that provides the PKI Certificate.

Candidate must be a US Citizen or currently have a Green Card.

This role will work with Teams across the United States and the world including Taiwan.

From a user support perspective, the candidate will need to work during USA hours since they will be the shared responsibility with another USA-based team member to serve as the primary contact for assistance for HPE Factory Build process issues related to the DevID service. It will include late evenings, and weekends as needed.

From a code development perspective, the candidate will need to effectively work with the DeviD Architect/Software Development Lead on development and maintenance of the code base for new functionality, existing code revision and 'bug fixes' as needed. This work includes development test validation with focus on use of test automation.

In terms of a typical day, the candidate will:

• Actively participate in DevID related meetings and calls during the USA hours
• Respond to emails from internal and external team members as needed
• If user support arises, it will be their primary responsibility until resolution and/or workaround is provided
• Work either as a team or individually on new code development and existing code revision; including creation/maintenance of automated test scripts for the DevID service.

Qualifications

• 2+ years of applicable and documented technical experience in the following areas:
• GoLAN code development/maintenance as a pure-GoLAN service including experience with CGo build constraints (Linux vs Windows HSM shims), interface design, and the standard library crypto stack.
• Java and C code development/maintenance since they are used in our legacy code.
• Applied cryptography experience: X.509 certificate chains, RSA, ECC. Ideally hands-on exposure to post-quantum algorithms (ML-DSA, ML-KEM including raw TPM wire-format parsing / CRYSTALS suite).
• Able to integrate with Hardware Security Modules (HSMs) for both RSA and ML-DSA key operations, including partition management and key label conventions.
• TPM 2.0 fundamentals: EK certificates, AK, attestation flows using go-tpm, TPMT_PUBLIC wire format (public area parsing).
• Linux systems: The production target is containerized Linux; must have experience with Docker, nginx, and system d-level debugging.
• Cybersecurity mindset: Familiarity with CNSA 2.0 requirements which are actively transitioning to CNSA 2.0 PQC algorithms.
• MariaDB, MS SQL Server SQL and MongoDB used for certificate and artifact tracking.
• GitHub Repositories. Able to effectively support a multi-environment deployment model. Able to maintain CI/CD pipelines via GitHub Actions, Docker multi-stage builds and a container registry deployment workflow.
• Use of AI in generation of product SPEC definition, code development, code validation test and code security monitoring.
• Bachelor’s degree in computer science, engineering or equivalent work experience.

Requirements

• Candidate must be a US Citizen or currently have a Green Card due to the requirements of the role.

Benefits

• Health & Wellbeing: Comprehensive suite of benefits that supports physical, financial and emotional wellbeing.
• Personal & Professional Development: Specific programs catered to helping you reach any career goals you have.
• Unconditional Inclusion: Flexibility to manage work and personal needs; a culture that celebrates individual uniqueness.