12 - Principal, Design Engineering

General Overview

Job Title: Principal, Design Engineering
Functional Area: Engineering (ENG)
Career Stream: Engineering (ENG)
Role: Principal (PRI)
Job Code: PRI-ENG-DSGN
Job Band: 12
Direct/Indirect Indicator: Indirect

Principal Engineer, Secure Software Development

Celestica is looking for a talented and passionate software engineer to drive security features and secure development processes in software development. You'll be responsible for designing, developing, reviewing security features. The responsibilities also include driving secure development processes in software development, vulnerability management and compliance with standards.

Key Responsibilities

Software Development:
•    Design, review and develop features in firmware and application software for secure access and verification e.g. secure boot, RBAC
•    Vulnerability analysis and threat modelling
•    Serve as a subject matter expert on product application and system vulnerabilities and threat management
•    Maintain patch and vulnerability management best practices
•    Develop secure development processes, evangelize and train developers in them
•    Optimize code for performance, efficiency, and low latency
•    Check compliance with security standards, identify gaps and propose solutions
•    Architect solutions for customer’s data center management needs in the security domain

Collaboration:
•    Work effectively in a team environment, collaborating with engineers and peer functional leads from different disciplines to innovate solutions, triage issues and speed execution
•    Work with product line management, customers and sales teams to understand requirements 
•    Explain the value addition of secure software to technical and non-technical audiences

Leadership: 
•    Mentor and coach team members on the technical skills and approaches to solve problems. 
•    Review and maintain quality of code going into production.
•    Architect software applications that will work across multiple technology generations with minimal changes
•    Present innovation and value addition from our software in technical forums and customer interactions
 

Knowledge/Skills/Competencies

Strong programming skills: Proficiency in C, C++ and other low-level programming languages. Knowledge of Python, Java will be plus.
Secure Development Background: Familiarity with security standards like JTIC, OWASP is required
Operating system knowledge: Experience with Linux development is a must. 
Hardware experience: Familiarity with driver development is a plus
Debugging and testing skills: Ability to identify and resolve software issues.
Problem-solving skills: Strong analytical and problem-solving abilities
Experience with data center deployments: Prior experience in data center architectures, developing and maintaining software for deployments is a plus
Clear Communication: Proven ability to articulate requirements and vision to large and diverse audience through written documents like architecture specifications and verbal presentations in technical forums is required

Physical Demands

Duties of this position are performed in a normal office environment.

Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. 

Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Occasional travel may be required.

Typical Experience

15-25 years of development experience with at least 2 years of experience in hardening software with secure features and ensuring compliance to security standards

Typical Education

Bachelor degree or higher education in Engineering

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.