Crypto Applications Team Software Engineer

Cisco

About The Position

The Cryptographic Services team is looking for a highly motivated Software Developer to work on our team, providing development and support for custom applications behind Cisco's growing Public Key Infrastructure (PKI) and cryptographic services. As a member of our team you will develop and support various cryptographic applications for critical business functions across the company. We work with a wide variety of internal Cisco teams needing key management, certificate authority, software signing, and other cryptographic services. We are responsible for updating existing applications to meet new business requirements. We are looking for candidates who can help us transition from a legacy Development to Production processes to a full DevOps operating model. You will work with other developers and Information Security Engineers to provide code reviews, assist in application testing (quality and security), and could be called on to provide after-hours application support. We are a centralized group of architects, developers, engineers and project/program managers that specialize in building and delivering cryptographic key and certificate management capabilities to the company, as well as enabling the business to deliver enhanced services to Cisco's customers. From SSL to anti-counterfeit to software-signing to information rights management to product licensing, this group of highly hardworking and passionate individuals provide critical security services across the breadth of Cisco's internal and external functions.

Requirements

Experience working in a SCRUM Agile workflow
Excellent documentation skills
Excellent Object Oriented Programming and Debugging skills (preference for Java, but C# and C++ will be considered)
Experience creating and deploying RESTful web services
Knowledge of common web attacks (CSRF, SQL Injection, Javascript injection, etc) and knowledge of how they are mitigated

Nice To Haves

Expertise providing support for global operations (includes a rotating after hours on call commitment approximately 1 week out of every 4-6 week cycle)
Ability to work across cultures and time zones
Provide application-specific knowledge transfer, training, & documentation
Excellent website creation experience (HTML, CSS, Javascript, JSP)
Experience with Ansible
Experience with Spring frameworks a plus (Spring Boot, Maven, Apache Tiles, Hibernate, etc.)
Good understanding and ability to use scripting languages (bash, python, etc)
Good understanding of network protocols (TCP, UDP, HTTP, TLS, etc)
Understanding of asymmetric and symmetric cryptography (RSA, ECC, AES, etc)
Understanding of PKCS standards
Experience creating/using/managing keys stored in HSMs
Knowledge of PKI uses for device and application authentication
Experience a modern CI/CD pipeline
Understands database design/development
Experience with crypto libraries like IAIK, Bouncy Castle, etc.

Responsibilities

Providing development and support for custom applications behind Cisco's growing Public Key Infrastructure (PKI) and cryptographic services
Develop and support various cryptographic applications for critical business functions across the company
Work with a wide variety of internal Cisco teams needing key management, certificate authority, software signing, and other cryptographic services
Updating existing applications to meet new business requirements
Help us transition from a legacy Development to Production processes to a full DevOps operating model
Work with other developers and Information Security Engineers to provide code reviews
Assist in application testing (quality and security)
Provide after-hours application support

Benefits

Medical, dental and vision insurance
A 401(k) plan with a Cisco matching contribution
Paid parental leave
Short and long-term disability coverage
Basic life insurance
Grants of Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time
10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
1 paid day off for employee’s birthday
Paid year-end holiday shutdown
4 paid days off for personal wellness determined by Cisco
Non-exempt employees receive 16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees
Exempt employees participate in Cisco’s flexible vacation time off program, which has no defined limit on how much vacation time eligible employees may use (subject to availability and some business limitations)
80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next
Additional paid time away may be requested to deal with critical or emergency issues for family members
Optional 10 paid days per full calendar year to volunteer
Annual bonuses (for non-sales roles)
Performance-based incentive pay (for sales plans)