Job Title: Product Security Lead

Location: Toronto, ON (remote)

Salary Range

Introduction

We are seeking an experienced professional to join the IT Support and Enablement function supporting the Hardware Platform Solutions (HPS) organization. In this role, you will take ownership of the code signing operating model used by HPS Software Engineering teams and drive its deployment, support, governance, and scale-up across product programs and design centers.

Serving as the key security and technical liaison across Information Security, DevOps, Software Engineering, infrastructure teams, and external vendors, you will ensure that our signing infrastructure, certificates, signing packages, key management practices, and supporting processes are secure, supportable, and production-ready.

Required Skills & Qualifications

- ● Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Software Engineering, or a related technical field.

● Minimum of 7+ years of experience in product security, application security, PKI, code signing infrastructure, platform security, or DevSecOps within active engineering or R&D; environments.

● Demonstrated experience operating in complex matrix environments, effectively bridging the technical gaps between enterprise IT security policies and agile software developer workflows.

Required Technical Skills

● PKI & Key Management: Deep conceptual and practical understanding of Public Key Infrastructure (PKI), certificate lifecycle management, cryptographic hashing, key escrow, and secure release governance.

● Signing Toolchains: Hands-on experience implementing and troubleshooting developer signing workflows, specifically using OpenSSL (Linux/Windows) and Client Signtool.





● HSM & KMS Platforms: Direct experience with HSM-integrated signing systems, PKCS#11 API integrations, and vendor-managed signing controllers (such as AppViewX PKI+).

● Systems & Automation Environment: Working knowledge of modern CI/CD pipelines (e.g., Azure DevOps, Jenkins, GitLab), automated test environments, and package validation processes.

● Technical Documentation: Strong ability to write high-quality, clear operational playbooks, developer guides, and compliance standards.

Preferred Skills & Qualifications

- Background supporting security controls for embedded systems, firmware development (e.g., AMI BIOS/BMC toolchains), or hardware component signing.

- Familiarity with secure boot architectures and device identity frameworks (such as iDevID, IEEE 802.1AR attestation, and dedicated/subordinate CA hierarchies).
- Industry-recognized security credentials, such as CISSP, CSSLP, or vendor-specific PKI/HSM engineering certifications.

Day-to-Day Responsibilities

- Design, roll out, and govern the HPS code signing capability, supporting a secure software chain of custody from initial build through final production release.

- Establish and maintain approved signing standards and integration patterns across both Linux and Windows development environments.
- Manage the lifecycle, provisioning, and distribution of signing certificates, cryptographic keys, signing policies, and signing packages.

Company Benefits & Culture

- Collaborative workplace with a focus on innovation and security.
- Opportunities for professional growth and development.
- Comprehensive benefits package.

For immediate consideration please click APPLY to begin the screening process with Alex.

📌 Product Security Lead (Ontario)
🏢 Artech
📍 Ontario