Remote opportunity at
CanonicalEngineering Manager - Security Standards and Hardening
This is a full-time, remote Engineering Manager role leading the team that defines security baselines for open-source software on Ubuntu. Scope runs across desktops, edge devices…
Career Tools
About This Role
This is a full-time, remote Engineering Manager role leading the team that defines security baselines for open-source software on Ubuntu. Scope runs across desktops, edge devices and cloud infrastructure, Kubernetes and OpenStack. The team certifies core components against industry standards and guides development teams company-wide in security best practice. The team focuses mainly on cryptographic modules under FIPS 140 and on system hardening, and works with partners including CIS and…
Job Description
This is a full-time, remote Engineering Manager role leading the team that defines security baselines for open-source software on Ubuntu. Scope runs across desktops, edge devices and cloud infrastructure, Kubernetes and OpenStack. The team certifies core components against industry standards and guides development teams company-wide in security best practice.
The team focuses mainly on cryptographic modules under FIPS 140 and on system hardening, and works with partners including CIS and DISA. Customers increasingly face demanding standards such as FIPS, CIS, STIG and FedRAMP, plus the Cyber Resilience Act, and the manager helps products and clients satisfy them. The manager leads engineers from graduate to senior level, coaches and gives career feedback, measures team health, sets disciplined engineering processes, plans goals and projects, and represents the team to stakeholders, partners and customers.
Applicants should have a degree in computing or a STEM subject, or a compelling alternative route, and a clear record of developing people. Prior work on FIPS or Common Criteria certified products is required, along with a deep grasp of the standards behind them. Hands-on work with DISA-STIG or CIS benchmark audits, plus remediation tooling such as compliance as code, is also required. Candidates need strong agile experience, excellent English communication and a drive to exceed expectations. Hands-on knowledge of Linux cryptography libraries such as OpenSSL or GnuTLS is valued. Travel to company events of up to two weeks, twice a year, is part of the role.
Responsibilities
- Lead and grow a group of engineers, from graduate to senior level
- Coach, mentor and give career development feedback
- Measure team health and put disciplined engineering processes in place
- Represent the team and its products to stakeholders, partners and customers
- Plan and steer delivery against agreed objectives and projects
- Help products and customers meet FIPS, CIS, STIG, FedRAMP and CRA requirements
- Support cryptographic module (FIPS 140) and system hardening work with industry partners such as CIS and DISA
Requirements
- Exceptional academic record through high school and university
- Undergraduate degree in computing or a STEM field, or a compelling alternative route
- A history of exceeding expectations
- Excellent verbal and written English
- A love of developing people, with a track record to show it
- Prior experience with FIPS or Common Criteria certified products
- Prior hands-on work with DISA-STIG or CIS benchmark audits and remediation tooling
- Solid experience in agile development environments
- Readiness to make two trips a year to company events lasting up to two weeks
Qualifications
- Hands-on knowledge of Linux cryptography libraries such as OpenSSL or GnuTLS is valued
Core Skills
Benefits
- Annual compensation review and a bonus tied to performance
- USD 2,000 each year for personal learning and development
- Twice-yearly in-person team sprints in a distributed setup
- Annual holiday leave, plus maternity and paternity leave
- Employee Assistance Programme
- Priority Pass access, plus upgraded seats on long-haul trips to company events
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this Security Standards Engineering Manager role remote?
Yes. The posting describes the role as remote, with no single office location specified.
What certifications or standards experience is required?
The posting requires prior experience with FIPS or Common Criteria certified products and with DISA-STIG or CIS benchmark audits and remediation tooling.
Is the role full-time, and what is the salary?
The role is full-time, and the posting does not specify a base salary. It does mention a bonus tied to performance.
What travel is expected?
The role requires the readiness to travel for company events of up to two weeks, twice a year.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.