It's fun to work in a company where people truly BELIEVE in what they're doing We're committed to bringing passion and customer focus to the business. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us Lumentum Canada was awarded the 2022 National Capital Region’s Top Employers for the 6th consecutive year and the 2022 Career Directory Canada’s Best Employers for Recent Graduates for the 5th consecutive year. About Lumentum At Lumentum, we’re building the tech behind the world’s fastest networks and most advanced systems. Our optical and photonic solutions power everything from AI and cloud computing to data centers, telecom, and advanced manufacturing. We’re a global team of innovators working where light meets technology, solving big challenges that keep the world connected and moving forward. If shaping the future of connectivity excites you, you’ll fit right in.

Why You'll Love This Role

We are seeking a Technical Manager to lead a team responsible for hardware-based security, trusted device identity, secure provisioning, and network authentication. This role will define and deliver security capabilities based on hardware roots of trust, gNSI, Secure Zero Touch Provisioning, and mutual TLS. The manager will work across hardware, firmware, operating-system, networking, cloud, manufacturing, and product teams to establish a trusted security lifecycle from device manufacturing through deployment, operation, upgrade, and retirement.

What You'll Be Doing

- Lead, mentor, and develop a team responsible for hardware and platform security.
- Define and implement hardware root-of-trust strategies for embedded and networking products.
- Oversee the use of TPMs,



secure boot, measured boot, hardware-backed keys, device identity, attestation, and trusted execution mechanisms.
- Lead development and integration of TPM-based DevID and ODevID solutions.
- Establish device identity lifecycle processes, including enrollment, provisioning, renewal, rotation, revocation, recovery, and retirement.
- Lead implementation of gNSI security services, including certificate management, authentication, authorization, path authorization, and credential management.
- Oversee Secure Zero Touch Provisioning, including secure device onboarding, bootstrap trust, ownership validation, policy enforcement, and protection against unauthorized provisioning.
- Oversee the implementation of the mTLS architectures for gNMI, gNOI, gNSI, management interfaces, and service-to-service communication.
- Establish certificate authority, PKI, certificate-profile, trust-bundle, and revocation-management requirements.
- Coordinate security architecture across hardware, bootloader, firmware, Linux, containers, networking services, and cloud infrastructure.
- Define attestation requirements, including PCR selection, measurement policy, deviceu2011state validation, and antiu2011rollback controls.
- Lead threat modeling, security design reviews, and technical risk assessments for platform and networku2011security features.




- Develop security requirements, architecture documents, interface specifications, test plans, and operational procedures.
- Coordinate interoperability, integration, penetration, negative, faultu2011injection, and lifecycle testing.
- Support customer security reviews, product certifications, audits, and incident investigations.

What We're Looking For

Education: Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related field.

Experience

- Experience leading teams developing platform security, embedded security, network security, or infrastructure security products.
- Robust understanding of hardware roots of trust, TPM 2.0, secure boot, measured boot, device identity, and remote attestation.
- Experience designing or deploying PKI, certificates, certificate authorities, trust stores, and mTLS.
- Experience with identity lifecycle management, key rotation, certificate renewal, revocation, and compromise recovery.
- Knowledge of gRPC, gNMI, gNOI, gNSI, TLS, authorization, authentication, and policy enforcement.
- Experience with secure provisioning, ZTP, SZTP, device enrollment, or manufacturingu2011time device personalization.
- Familiarity with Linux, embedded systems, networking protocols, and cloudu2011based security services.
- Strong technical leadership, communication, documentation, and crossu2011functional collaboration skills.
- Ability to convert security architecture into implementable product requirements and verifiable test cases.
- Asset/Nice to Have Experience with OpenConfig security services, gNSI, TPM2u2012Tools, TSS, DevID, IDevID, ODevID, or DICE.

📌 Technical Manager (Canada)
🏢 Lumentum Operations
📍 Canada