Embedded Security Engineer
Top Benefits
About the role
It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us! Lumentum Canada was awarded the 2022 National Capital Region’s Top Employers for the 6th consecutive year and the 2022 Career Directory Canada’s Best Employers for Recent Graduates for the 5th consecutive year .
Position Title: Embedded Security Engineer
Employment Type: Full-time, Existing vacancy
Location: Ottawa ON, Onsite
About Lumentum At Lumentum, we’re building the tech behind the world’s fastest networks and most advanced systems. Our optical and photonic solutions power everything from AI and cloud computing to data centers, telecom, and advanced manufacturing.
We’re a global team of innovators working where light meets technology, solving big challenges that keep the world connected and moving forward. If shaping the future of connectivity excites you, you’ll fit right in.
What You’ll Be Doing
- Design and implement secure boot architectures
- Implement SSD/data-at-rest encryption (key hierarchy, provisioning, rotation, secure erase, performance tradeoffs)
- Design and integrate gNSI security services and commands (authz, credential rotation, cert management, pathz, authz, secure RPCs)
- Implement and harden TLS stacks for control, telemetry, and management planes (mTLS, cert lifecycle, crypto agility)
- Integrate hardware security primitives (TPM, secure elements, eFuses, PUFs)
- Partner with hardware, platform, and manufacturing teams to operationalize security at scale
- Drive security validation, automation, and support internal/external security reviews
Education What We’re Looking For Bachelor’s degree in computer science, Computer Engineering, Software Engineering, Electrical Engineering, or a related field
Experience
- 5+ years embedded software experience with a strong focus on security
- Expert Python/Go for embedded systems; familiarity with C/C++
- Hands-on experience with secure BIOS/bootloaders, cryptography (ECC/RSA, AES, SHA-2/3), and PKI
- x86 platform security experience, including BIOS/UEFI, measured boot, and firmware trust chains
- TCG Opal experience (self-encrypting drives, disk encryption, pre-boot authentication)
- TPM 2.0 integration and usage (measured boot, key sealing, attestation)
- Knowledge of secure supply chain practices, SBOMs, and device identity at scale
- Practical experience implementing TLS/mTLS and certificate lifecycle management
- Understanding of network device security and management interfaces (gRPC/gNMI/gNSI)
- Experience with Linux-based embedded platforms and/or RTOS environments
- Strong debugging skills
Asset/Nice to Have
- Experience in telecom, networking, or optical systems
- Knowledge of secure manufacturing, provisioning, and RMA flows
Perks You’ll Love
- Flexible time off
- Health and wellness benefits (physical and mental)
- Tuition reimbursement and career growth support
- A workplace built for you: free gym, games room, prayer room
- Subsidized meals, free coffee/tea
- Employee stock options and incentive plans
- A collaborative, innovative, and inclusive culture
Salary Range The salary range for this position is $110,625 - $149,675 CAD (Flexible).
Final compensation will be determined based on factors such as experience, skills, and qualifications. In line with our commitment to being a great place to work, Lumentum offers competitive total rewards which may include annual bonus, equity, and comprehensive health and welfare benefits.
Join a Team That’s Shaping the Future At Lumentum, we’re more than just a workplace—we’re a launchpad for creativity and innovation. We’re committed to celebrating your unique talents and helping you grow. Our guiding principles—Innovate, Engage, Deliver, Excel, and Win—aren’t just words; they’re the heart of what we do.
Let’s Build a Brighter Future Together! We’re committed to building an inclusive workplace where everyone feels valued and empowered. We welcome applicants from all backgrounds and provide accommodations for individuals with disabilities throughout the hiring process. Your uniqueness makes us stronger, sparks creativity, and drives our success.
Please contact us at talentacquisition@lumentum.com to request accommodation. Join us—your future starts here!
About Lumentum
Lumentum (NASDAQ: LITE) is a market-leading designer and manufacturer of innovative optical and photonic products enabling optical networking and laser applications worldwide. Lumentum optical components and subsystems are part of virtually every type of telecom, enterprise, and data center network. Lumentum lasers enable advanced manufacturing techniques and diverse applications including next-generation 3D sensing capabilities. Lumentum is headquartered in San Jose, California with R&D, manufacturing, and sales offices worldwide.
Similar jobs you might like
Embedded Security Engineer
Top Benefits
About the role
It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us! Lumentum Canada was awarded the 2022 National Capital Region’s Top Employers for the 6th consecutive year and the 2022 Career Directory Canada’s Best Employers for Recent Graduates for the 5th consecutive year .
Position Title: Embedded Security Engineer
Employment Type: Full-time, Existing vacancy
Location: Ottawa ON, Onsite
About Lumentum At Lumentum, we’re building the tech behind the world’s fastest networks and most advanced systems. Our optical and photonic solutions power everything from AI and cloud computing to data centers, telecom, and advanced manufacturing.
We’re a global team of innovators working where light meets technology, solving big challenges that keep the world connected and moving forward. If shaping the future of connectivity excites you, you’ll fit right in.
What You’ll Be Doing
- Design and implement secure boot architectures
- Implement SSD/data-at-rest encryption (key hierarchy, provisioning, rotation, secure erase, performance tradeoffs)
- Design and integrate gNSI security services and commands (authz, credential rotation, cert management, pathz, authz, secure RPCs)
- Implement and harden TLS stacks for control, telemetry, and management planes (mTLS, cert lifecycle, crypto agility)
- Integrate hardware security primitives (TPM, secure elements, eFuses, PUFs)
- Partner with hardware, platform, and manufacturing teams to operationalize security at scale
- Drive security validation, automation, and support internal/external security reviews
Education What We’re Looking For Bachelor’s degree in computer science, Computer Engineering, Software Engineering, Electrical Engineering, or a related field
Experience
- 5+ years embedded software experience with a strong focus on security
- Expert Python/Go for embedded systems; familiarity with C/C++
- Hands-on experience with secure BIOS/bootloaders, cryptography (ECC/RSA, AES, SHA-2/3), and PKI
- x86 platform security experience, including BIOS/UEFI, measured boot, and firmware trust chains
- TCG Opal experience (self-encrypting drives, disk encryption, pre-boot authentication)
- TPM 2.0 integration and usage (measured boot, key sealing, attestation)
- Knowledge of secure supply chain practices, SBOMs, and device identity at scale
- Practical experience implementing TLS/mTLS and certificate lifecycle management
- Understanding of network device security and management interfaces (gRPC/gNMI/gNSI)
- Experience with Linux-based embedded platforms and/or RTOS environments
- Strong debugging skills
Asset/Nice to Have
- Experience in telecom, networking, or optical systems
- Knowledge of secure manufacturing, provisioning, and RMA flows
Perks You’ll Love
- Flexible time off
- Health and wellness benefits (physical and mental)
- Tuition reimbursement and career growth support
- A workplace built for you: free gym, games room, prayer room
- Subsidized meals, free coffee/tea
- Employee stock options and incentive plans
- A collaborative, innovative, and inclusive culture
Salary Range The salary range for this position is $110,625 - $149,675 CAD (Flexible).
Final compensation will be determined based on factors such as experience, skills, and qualifications. In line with our commitment to being a great place to work, Lumentum offers competitive total rewards which may include annual bonus, equity, and comprehensive health and welfare benefits.
Join a Team That’s Shaping the Future At Lumentum, we’re more than just a workplace—we’re a launchpad for creativity and innovation. We’re committed to celebrating your unique talents and helping you grow. Our guiding principles—Innovate, Engage, Deliver, Excel, and Win—aren’t just words; they’re the heart of what we do.
Let’s Build a Brighter Future Together! We’re committed to building an inclusive workplace where everyone feels valued and empowered. We welcome applicants from all backgrounds and provide accommodations for individuals with disabilities throughout the hiring process. Your uniqueness makes us stronger, sparks creativity, and drives our success.
Please contact us at talentacquisition@lumentum.com to request accommodation. Join us—your future starts here!
About Lumentum
Lumentum (NASDAQ: LITE) is a market-leading designer and manufacturer of innovative optical and photonic products enabling optical networking and laser applications worldwide. Lumentum optical components and subsystems are part of virtually every type of telecom, enterprise, and data center network. Lumentum lasers enable advanced manufacturing techniques and diverse applications including next-generation 3D sensing capabilities. Lumentum is headquartered in San Jose, California with R&D, manufacturing, and sales offices worldwide.