SPECIALIST IN VEHICLE CYBERSECURITY, PKI & CLOUD SECURITY

Sobre a vaga

Descrição: Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions. What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team! The person in this role will be responsible for designing, implementing, operating, and continuously improving the cryptographic trust infrastructure that secures connected vehicles and software-defined vehicle ecosystems. This position combines expertise in Vehicle Public Key Infrastructure (VPKI), cloud security, cryptographic services, automation, and DevSecOps to ensure scalable, resilient, and secure solutions supporting global mobility patforms and connected services. Main Activities: • Design, deploy and maintain global Vehicle PKI services supporting vehicle identities, firmware signing, OTA security, V2X communications and connected services authentication; • Define trust models, certificate hierarchies and cryptographic architectures aligned with cybersecurity standards and industry best practices; • Manage certificate lifecycle processes including enrollment, provisioning, renewal, revocation and recovery; • Design and operate cloud-native PKI services and security architectures across cloud environments; • Develop Infrastructure as Code and automation solutions supporting PKI operations and security controls; • Collaborate with Product Security, Engineering and Connected Services teams to integrate cryptographic controls into product development; • Participate in cybersecurity assessments, architecture reviews and security requirement definition activities; • Drive innovation initiatives related to cryptographic services, Zero Trust architectures, cloud security and next-generation trust technologies. Requisitos: We expect you to have: • Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering or related field; • Knowledge of Public Key Infrastructure (PKI), cryptographic services and certificate lifecycle management; • Understanding of X.509, PKCS standards, OCSP, CRL, TLS and secure key management principles; • Experience with Linux/Unix environments, OpenSSL and scripting languages such as Python or Bash; • Proficiency in English, both written and spoken; • Availability to work onsite in Betim (MG), Brazil. It will be considered a plus if you have: • Knowledge of ISO/SAE 21434, UNECE R155 and automotive cybersecurity frameworks; • Experience with connected vehicle platforms, Secure Boot, OTA Security and ECU identity management; • Experience with Azure, AWS, Kubernetes, containers and cloud-native security architectures; • Knowledge of PKI platforms such as Microsoft PKI, EJBCA, HashiCorp Vault or Cloud HSM solutions; • Industry certifications related to cybersecurity, cloud security, cryptography or automotive cybersecurity.

Habilidades

O que você vai fazer

• Projetar, implantar e manter serviços globais de PKI veicular.
• Definir modelos de confiança e arquiteturas criptográficas.
• Gerenciar ciclo de vida de certificados (inscrição, provisão, renovação).
• Projetar e operar serviços de PKI nativos em nuvem.
• Desenvolver soluções de Infraestrutura como Código e automação.

O que você precisa ter

• Graduação em Cibersegurança, Ciência da Computação ou áreas correlatas.
• Conhecimento em Infraestrutura de Chave Pública (PKI) e serviços criptográficos.
• Entendimento de X.509, PKCS, OCSP, CRL, TLS e gerenciamento de chaves.
• Experiência com ambientes Linux/Unix, OpenSSL e linguagens de script.
• Proficiência em inglês (escrito e falado).

Perguntas frequentes