Product Security Lead (Code Signing ​/ PKI

Product Security Lead (Code Signing / PKI)

• Location:
  Toronto, ON and Richardson, TX

We at Raise are hiring a Product Security Lead (Code Signing / PKI) for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet rising demand.

• Own and manage enterprise PKI services, HSM platforms, AppViewX PKI+, certificates, cryptographic keys, and signing infrastructure.
• Provision, configure, maintain, secure, and monitor HSM-backed code-signing services across enterprise environments.
• Administer PKCS#11 integrations and resolve interoperability issues between signing tools, applications, HSMs, and PKI services.
• Maintain reliable, scalable, and production-ready signing capabilities for critical product initiatives.

• Implement and support Windows and Linux code-signing workflows using Microsoft Sign Tool, OpenSSL, and associated platform tooling.
• Integrate signing capabilities into enterprise CI/CD, build, release, and artifact-management pipelines.
• Automate secure signing processes while preserving key protection, access controls, traceability, compliance, and audit requirements.
• Troubleshoot signing failures, certificate-chain issues, HSM connectivity, PKCS#11 integrations, and operational workflow interruptions.

• Own certificate and key lifecycle processes, including issuance, secure storage, rotation, renewal, revocation, retirement, and recovery planning.
• Establish and maintain governance, access, approval, monitoring, and audit controls for signing assets and cryptographic material.
• Coordinate certificate renewals and key rotations to minimize disruption to development, manufacturing, and release activities.
• Maintain accurate standards, inventories, procedures, operational records, and audit evidence.

• Support secure firmware and embedded-system signing processes throughout product development and release life cycles.
• Enable and maintain Secure Boot signing implementations and associated trust relationships.
• Support device identity implementations, including iDevID certificates and related provisioning processes.
• Partner with product and manufacturing teams to enforce secure, traceable handoffs of signed artifacts.

• Embed code-signing requirements and controls within secure development and product release processes.
• Strengthen software supply-chain integrity through authenticated artifacts, controlled signing services, and auditable chain-of-custody practices.
• Collaborate with engineering, Dev Ops, release, security, compliance, and manufacturing stakeholders to resolve risks and operational gaps.
• Drive scalable improvements to production signing architecture, automation, resiliency, and operational readiness.

Candidates must demonstrate direct, hands‑on ownership in the following areas:

• Direct practitioner ownership: Candidates must demonstrate direct hands‑on ownership of code-signing infrastructure, HSM‑backed signing services, AppViewX PKI+, embedded‑security controls, or enterprise PKI operations. Security‑adjacent experience without direct implementation and operational ownership is not sufficient for this role.
• PKI and cryptographic services: Enterprise PKI, certificate management, HSM administration and integration, AppViewX PKI+, and PKCS#11 standards and integrations.
• Certificate and key lifecycle ownership: Issuance, secure storage, rotation, renewal, revocation, retirement, governance, compliance, and audit support.
• Cross‑platform code signing: Linux and Windows signing workflows using OpenSSL, Microsoft Sign Tool, and CI/CD pipeline integrations.
• Embedded product security: Firmware and embedded‑system signing, Secure Boot implementations, device identities such as iDevID, and production release controls.
• Software supply‑chain integrity: Secure SDLC, manufacturing and software chain‑of‑custody processes, and production‑grade code‑signing operations.