Remote opportunity at
CanonicalEngineering Manager - Security Standards and Hardening
Canonical publishes Ubuntu and delivers open-source platforms utilized for cloud, edge, desktop, and server environments. The company is seeking an Engineering Manager for Security Standards and…
Career Tools
About This Role
Canonical publishes Ubuntu and delivers open-source platforms utilized for cloud, edge, desktop, and server environments. The company is seeking an Engineering Manager for Security Standards and Hardening to lead a team focused on protecting the open-source ecosystem, handling system hardening, and aligning core components with industry security standards. This remote position involves overseeing engineering talent from entry-level to senior roles, driving team health, setting engineering practices, and collaborating with partners…
Job Description
Canonical publishes Ubuntu and delivers open-source platforms utilized for cloud, edge, desktop, and server environments. The company is seeking an Engineering Manager for Security Standards and Hardening to lead a team focused on protecting the open-source ecosystem, handling system hardening, and aligning core components with industry security standards.
This remote position involves overseeing engineering talent from entry-level to senior roles, driving team health, setting engineering practices, and collaborating with partners such as DISA and CIS. The role requires managing progress on compliance frameworks like FIPS, CIS, STIG, FedRAMP, and the CRA, while providing mentorship and career guidance to staff.
Responsibilities
- Lead, coach, mentor, and direct the career development of an engineering team ranging from graduate to senior levels
- Define and measure team health indicators and implement disciplined engineering processes
- Represent the team and its products to external stakeholders, partners, and customers
- Establish and evangelize strong organizational and engineering practices
- Plan and manage project progress to meet agreed goals
- Assist products and customers in meeting stringent security requirements including FIPS, CIS, STIG, FedRAMP, and the CRA
- Support cryptography module initiatives and system hardening efforts alongside partners like CIS and DISA
Requirements
- Undergraduate degree in Computer Science or a STEM field, or a clear narrative of an alternative path
- Strong verbal and written communication skills in English
- Demonstrated track record of developing and growing engineering talent
- Organized approach to ensure the team delivers timely, high-quality results
- Professional interaction style with colleagues, partners, and the community
- Prior experience working on FIPS or Common Criteria certified products along with deep knowledge of underlying standards
- Direct experience working with DISA-STIG or CIS benchmarks, including related audit and remediation tooling like Compliance as Code
- Knowledge of and passion for application and software security
- Solid background in an agile development environment
- Demonstrated drive for continuous learning, building trust, and meeting commitments
- Ability to travel twice per year for company events lasting up to two weeks each
Qualifications
- Hands-on domain knowledge of Linux cryptography libraries such as OpenSSL and GnuTLS
Core Skills
Benefits
- Distributed work environment with bi-annual in-person team sprints
- Annual personal learning and development budget of USD 2,000
- Annual compensation reviews
- Recognition rewards
- Annual holiday leave
- Maternity and paternity leave
- Employee Assistance Programme
- Priority Pass and travel upgrades for long-haul company events
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, Canonical operates as a remote-first company and this role is distributed, though it requires the ability to travel twice a year for in-person company events of up to two weeks each.
What is the salary for this position?
The salary is not stated in the job posting.
What kind of experience is required for this role?
Candidates must have experience managing and growing engineering talent, prior work with FIPS or Common Criteria certified products, and direct experience with DISA-STIG or CIS benchmarks and compliance tooling.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.