Implement secure zero-touch provisioning (Bootz) and device enrollment workflows, including bootstrap identity, credential issuance, trust establishment, and recovery.
Develop device attestation capabilities using TPM-backed identity and measured-boot evidence, including collection and validation of platform measurements.
Implement and harden TLS and mutual TLS for control, telemetry, and management planes, including certificate issuance, rotation, revocation, and trust-bundle updates.
Build security tests and automation; investigate defects; and support internal and external security reviews.
What We’re Looking For
Education
Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
Experience
Core Requirements
5+ years of embedded software development experience, including substantial work on security-sensitive systems.
Strong Python or Go development skills; familiarity with C or C++.
Experience developing for Linux-based embedded platforms; RTOS experience is a plus.
Practical experience with cryptography, PKI, TLS, and mutual TLS.
Understanding of network-device security and management protocols, such as gRPC, gNMI, or gNSI.
Experience designing or integrating secure provisioning, enrollment, credential management, or certificate lifecycle workflows.
Strong debugging skills and the ability to work across software and platform boundaries.
Clear written and verbal communication skills, including the ability to document designs and explain security decisions.
Preferred Qualifications
Experience implementing or operating gNSI services such as authz, pathz, credentialz, or certz.
Experience with secure zero-touch provisioning, device attestation, TPM 2.0, measured boot, or hardware-backed device identity.
Knowledge of secure boot chains, hardware roots of trust, or manufacturing security.
Experience in telecom, networking, optical systems, or other embedded infrastructure.
Familiarity with security testing, automation, and vulnerability review processes.
Perks You’ll Love
Flexible time off
Health and wellness benefits (physical and mental)
Tuition reimbursement and career growth support
A workplace built for you: free gym, games room, prayer room
Subsidized meals, free coffee/tea
Employee stock options and incentive plans
A collaborative, innovative, and inclusive culture
Salary Range
The salary range for this position is $110,000 - $140,000
Final compensation will be determined based on factors such as experience, skills, and qualifications. In line with our commitment to being a great place to work, Lumentum offers competitive total rewards which may include annual bonus, equity, and comprehensive health and welfare benefits.
Join a Team That’s Shaping the Future
At Lumentum, we’re more than just a workplace—we’re a launchpad for creativity and innovation. We’re committed to celebrating your unique talents and helping you grow. Our guiding principles—Innovate, Engage, Deliver, Excel, and Win—aren’t just words; they’re the heart of what we do.
Let’s Build a Brighter Future Together!
We’re committed to building an inclusive workplace where everyone feels valued and empowered. We welcome applicants from all backgrounds and provide accommodations for individuals with disabilities throughout the hiring process. Your uniqueness makes us stronger, sparks creativity, and drives our success.
Please contact us at talentacquisition@lumentum.com to request accommodation.
Join us—your future starts here!