Principal Product Security Engineer

Red River • Boston, MA

4d

About The Position

Red Hat's products form the foundation of the enterprise IT landscape, and the trust in those products is built on cryptography. As the cryptographic landscape faces its greatest shift in a generation—the transition to Post-Quantum Cryptography (PQC)—Red Hat is building out our portfolio team to govern our cryptographic future. We are forming a Portfolio Crypto Team, a strategic partnership between Product Security and RHEL Security. As a Principal Product Security Engineer, you will be the strategic leader for this team, acting as the chief architect for Red Hat's portfolio-wide cryptographic strategy and policy. Your mission is to ensure Red Hat's portfolio remains secure, compliant, and agile in the face of evolving cryptographic threats. You will act as an expert across a group of projects, steer collaboration across products, and have a visible business impact by defining the long-term technical strategy for cryptography at Red Hat.

Requirements

• Technical Expertise: Deep and broad expertise in applied cryptography (PKI, TLS, digital signatures) and core libraries (OpenSSL, NSS, GnuTLS, go). Expert-level understanding of modern cryptographic challenges and protocols, including Post-Quantum Cryptography (PQC).
• Strategic Leadership: Proven experience architecting and driving complex, cross-portfolio technical strategy in a large, matrixed organization. You must be able to steer collaboration across products.
• Policy & Governance: Demonstrable experience in authoring, evangelizing, and governing technical security policy, especially related to compliance standards like FIPS.
• Communication & Influence: Ability to translate complex cryptographic concepts into actionable plans for engineering, product management, and executive leadership.

Nice To Haves

• Deep knowledge of HSMs/PKCS#11, hardware-based key protection, and standards body participation.

Responsibilities

• Act as a Strategic Influencer and SME: Serve as Red Hat's senior subject matter expert (SME) on cryptographic strategy, influencing and contributing to upstream communities (e.g., Go, python) and standards bodies (IETF). Consult with senior leadership and product architects to resolve complex, cross-portfolio dependencies and ensure strategic alignment.
• Architect and Govern Portfolio-Wide Cryptographic Policy: Own and evolve the Portfolio’s formal cryptographic policy, defining the standards for algorithm use, key lengths, and protocol implementation across all products. Serve as the central authority for cryptographic compliance strategy, working with the Product teams and Business Unit leaders to align engineering efforts with government and regulatory requirements. Lead the strategic response to future cryptographic inflection points (e.g., new PQC standards, major breaks).
• Drive Long-Term Cryptographic Agility: Architect and govern the strategy for a common cryptographic API in conjunction with RHEL Security, enabling product teams to consume crypto services in a standardized, crypto-agile way. Steer collaboration across product teams (OpenShift, Middleware, Ansible, etc.) to gather requirements and drive adoption of centralized, modern cryptographic libraries.
• Lead Cryptographic Risk Management Strategy: Architect and own the long-term strategy for cryptographic discovery, runtime analysis, and transition management within our products and for our customers. Define the high-level requirements for our Cryptographic Bill of Materials (CBOM) and runtime auditing tools, partnering with build and platform teams to create a sustainable solution for tracking crypto use and risk across the portfolio.

Benefits

• Comprehensive medical, dental, and vision coverage
• Flexible Spending Account - healthcare and dependent care
• Health Savings Account - high deductible medical plan
• Retirement 401(k) with employer match
• Paid time off and holidays
• Paid parental leave plans for all new parents
• Leave benefits including disability, paid family medical leave, and paid military leave
• Additional benefits including employee stock purchase plan, family planning reimbursement, tuition reimbursement, transportation expense account, employee assistance program, and more!

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed