Linux Cryptography and Security Engineer - Canonical

Role Overview

This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant with international standards such as FIPS 140-3 and Common Criteria. You will enhance the Ubuntu distribution and work with organizations like DISA and CIS to draft and implement security hardening benchmarks.

As a member of the Security Hardening team, you will develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance, identify framework gaps, and drive team direction and execution.

Day-to-Day Responsibilities

• Collaborate with the Security Hardening team to achieve and retain security certifications.
• Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS) for FIPS and CC certification.
• Partner with external security consultants to validate kernel and crypto module components.
• Develop security hardening benchmarks and audit/remediation automation for Ubuntu.
• Contribute to Ubuntu mainline and upstream projects.
• Communicate across Canonical to improve security posture and resolve issues.

What We Are Looking For

• Hands-on experience with low-level Linux cryptography APIs and debugging.
• Excellent software engineering fundamentals, including C development experience.
• Proficiency in Linux system administration and shell scripting.
• Demonstrated knowledge of security and cryptography fundamentals and secure coding practices.
• Significant experience working with open source libraries.
• Excellent verbal and written communication skills for a remote-first environment.

Additional Skills (Bonus)

• Experience with FIPS/Common Criteria certified products.
• Knowledge of DISA-STIG or CIS benchmarks and Compliance as Code tooling.
• Experience working directly with the Linux Kernel.
• Proficiency in Python, OVAL, or Ansible.
• History of open source contributions.

What We Offer

• Distributed work environment with twice-yearly in-person team sprints.
• Personal learning and development budget of $2,000 USD per year.
• Annual compensation review and performance-driven annual bonus.
• Comprehensive benefits including holiday leave, parental leave, and an Employee Assistance Programme.
• Travel opportunities for team events and collaboration.