Product Security Compliance Engineer (FIPS, Crypto, Common Criteria, OCP-SAFE, C)
Share
Job Location:
Monthly Salary:
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Job Summary
About Marvell
Marvells semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise cloud and AI and carrier architectures our innovative technology is enabling new possibilities.
At Marvell you can affect the arc of individual lives lift the trajectory of entire industries and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation above and beyond fleeting trends Marvell is a place to thrive learn and lead.
Your Team Your Impact
Marvell is at the forefront of cloud data protection and security partnering with major public cloud providers to offer scalable and secure data encryption solutions across public private and hybrid cloud environments.As we continue to grow we are seeking a highly skilled and motivated
Firmware Certification Engineer to join our team.
The ideal candidate will have extensive experience
with FIPS 140-3 Level 3 and 4 PCI PTS and Common Criteria certification processes with a strong emphasis on Implementation Guidance (IGs) and standards.
What You Can Expect
Interpret and apply FIPS 140-3 Implementation Guidance (IGs) to ensure that all cryptographic modules meet the required standards.
Prepare and review detailed documentation including Security Policies Design
Documentation and Test Reports with a focus on IG compliance.
Conduct and oversee algorithm testing entropy testing and physical security testing to ensure compliance with FIPS 140-3 requirements.
Work closely with cross-functional teams including hardware engineers software developers and security analysts to ensure seamless integration and compliance.
Oversee the entire FIPS 140-3 Level 4 certification process for firmware ensuring
Compliance with all relevant standards and guidelines.
Stay updated with the latest FIPS 140-3 standards IGs and guidelines and implement best practices to improve the certification process.
What Were Looking For
Bachelors or Masters degree in computer science or a related fields with a Minimum of 5 to 10 years of experience in FIPS 140-2/140-3 certification with a focus on Level 3 and 4 requirements.
Strong understanding of cryptographic algorithms entropy sources physical security mechanisms and FIPS 140-3 IGs. Familiarity with CAVP and ACVTS testing processes.
Excellent communication documentation and project management skills. Ability to work collaboratively in a team environment.
Previous experience in a lab environment conducting FIPS 140-3 validations.
Experience with Common Criteria PCIPTS NIAP and other security certifications.
Knowledge of SP 800-90B and associated IG requirements.
Additional Compensation and Benefit Elements
With competitive compensation and great benefits you will enjoy our workstyle within an environment of shared collaboration transparency and inclusivity. Were dedicated to giving our people the tools and resources they need to succeed in doing work that matters and to grow and develop with us. For additional information on what its like to work at Marvell visit our Careers page.
All qualified applicants will receive consideration for employment without regard to race color religion sex national origin sexual orientation gender identity disability or protected veteran status.
Interview Integrity
As part of our commitment to fair and authentic hiring practices we ask that candidates do not use AI tools (e.g. transcription apps real-time answer generators like ChatGPT CoPilot or note-taking bots) during interviews.
Our interviews are designed to assess your personal experience thought process and communication skills in real-time. If a candidate uses such tools during an interview they will be disqualified from the hiring process.
This position may require access to technology and/or software subject to U.S. export control laws and regulations including the Export Administration Regulations (EAR). As such applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens lawful permanent residents or protected individuals as defined by 8 U.S.C. 1324b(a)(3) all applicants may be subject to an export license review process prior to employment.
#LI-RS1
Key Skills
- APQP
- Six Sigma
- GD&T
- Root cause Analysis
- CAD
- Project Leadership
- SolidWorks
- Mechanical Engineering
- Quality Management
- Product Development
- Catia
- Manufacturing
About Company
Designed for your current needs and future ambitions, Marvell delivers the data infrastructure technology transforming tomorrow’s enterprise, cloud, automotive, and carrier architectures for the better.
