Remote opportunity at
CanonicalLinux Cryptography and Security Engineer
Canonical's Security Hardening team needs an engineer who can extend Linux cryptography and security components so that Ubuntu can satisfy FIPS 140-3 as well as the…
Career Tools
About This Role
Canonical's Security Hardening team needs an engineer who can extend Linux cryptography and security components so that Ubuntu can satisfy FIPS 140-3 as well as the Common Criteria. The role blends applied cryptography, Linux security and software engineering, and feeds into the Ubuntu distribution as a whole. The team also works with DISA and CIS on security hardening benchmarks. The engineer builds and maintains automation that audits deployed systems against…
Job Description
Canonical's Security Hardening team needs an engineer who can extend Linux cryptography and security components so that Ubuntu can satisfy FIPS 140-3 as well as the Common Criteria. The role blends applied cryptography, Linux security and software engineering, and feeds into the Ubuntu distribution as a whole. The team also works with DISA and CIS on security hardening benchmarks.
The engineer builds and maintains automation that audits deployed systems against DISA-STIG and CIS benchmarks, and helps create remediation tooling. They add features to libraries such as OpenSSL, Libgcrypt and GnuTLS for certification work, test kernel and crypto module components with external security consultants, and push changes upstream. The job also involves spotting gaps in the team's frameworks, proposing new solutions, and working with Canonical's kernel team. The engineer helps shape the team's security culture and direction.
The listing is marked remote. The role suits someone with hands-on experience of low-level cryptography APIs, strong C skills, and comfort with Linux administration and shell scripting.
Responsibilities
- Help the team achieve and maintain security certifications
- Extend cryptographic libraries with features needed for FIPS and Common Criteria certification
- Test kernel and crypto module components with external security consultants
- Build hardening benchmarks and audit and remediation automation with external partners
- Push changes into Ubuntu mainline and into upstream codebases
- Communicate across and beyond Canonical to strengthen the security posture
Requirements
- Practical work with low-level Linux crypto APIs, including debugging them
- Strong software engineering fundamentals, including prior C development
- Practical Linux sysadmin skills and shell scripting
- Grounding in security and crypto fundamentals, plus experience writing secure code
- Significant experience developing with open-source libraries
- Clear written and verbal communication for a remote-first environment
Qualifications
- Experience with FIPS or Common Criteria certified products and knowledge of the standards
- Familiarity with DISA-STIG or CIS benchmark frameworks, audit and remediation tooling, or Compliance as Code
- Direct experience with the Linux kernel
- Python, Ansible and OVAL (Open Vulnerability Assessment Language) skills
- A record of contributing to open-source projects
Core Skills
Benefits
- Home-based work plus in-person team sprints twice a year
- Yearly allowance of USD 2,000 toward training
- Yearly pay review and recognition awards
- Yearly holiday leave, plus maternity and paternity leave
- Employee Assistance Programme
- Chances to visit new places and meet coworkers
- Priority Pass access and travel upgrades on long-haul company trips
- Performance-based annual bonus
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is the role remote?
The listing is marked remote. The posting does not give a more specific location.
Which standards does the work relate to?
Certification work covers FIPS 140-3 as well as Common Criteria, while DISA-STIG and CIS hardening benchmarks are also involved.
Is salary information included?
The posting does not specify a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.