Sr. Security & Test Engineer - Device OS (PKI & Firmware Security)

Fiserv•Sunnyvale, CA

18d•$140,000 - $210,000•Onsite

About The Position

Clover, a Fiserv company, is a global leader in point-of-sale platforms powering millions of small businesses worldwide with integrated hardware, software, and payment solutions. In this role, you will join the DeviceOS team, which owns all platform software, secure boot infrastructure, and mass manufacturing software running on Clover hardware. You will design, build, and execute security validation strategies, manage embedded PKI/HSM trust architectures, and ensure our POS devices meet strict regulatory and cryptographic compliance standards.

Requirements

5+ years of professional experience in Software Security, PKI Engineering, AppSec, or Software QA/Testing.
Deep hands-on experience with Public Key Infrastructure (PKI), Certificate & Key Management, and Hardware Security Modules (HSMs, e.g., Thales).
Strong domain knowledge of security protocols, symmetric/asymmetric encryption, TLS/mTLS, and digital certificates.
Experience with vulnerability management, security scanning tools, and risk assessments within Linux, Android (AOSP), or cloud/embedded infrastructure.
Practical scripting skills (Python, PowerShell, or Bash) to automate security workflows, log extraction, and diagnostic testing.
Familiarity with secure CI/CD pipelines, version control, and infrastructure orchestration (Jenkins, GitHub Actions, Terraform, Jira).
Excellent communication skills with the ability to partner across engineering, GRC, and product teams to remediate findings.

Nice To Haves

Experience validating software or hardware for certified/regulated standards (PCI-PTS, PCI-PIN, SOC 2, or ISO 27001).
Hands-on exposure to penetration testing tools (e.g., BurpSuite, Metasploit) or cloud security posture management (e.g., Wiz, AWS SSM).
Experience with Android test frameworks (UIAutomator, adb debugging, Logcat analysis).
Prior experience managing supply chain security, golden image retention, or mass manufacturing provisioning software.

Responsibilities

Design, develop, and execute comprehensive security and testing strategies for the Device OS powering Clover Point of Sale devices.
Manage and validate PKI infrastructure, Certificate Authority (CA) lifecycles, and Hardware Security Modules (HSMs) for secure device provisioning and key management.
Take direct accountability for overall platform security, vulnerability management, and operational quality across Clover hardware product lines.
Interpret PCI-PTS and PCI-PIN specifications to design and execute compliance, penetration testing, and risk validation workflows.
Audit and secure CI/CD build pipelines, automated deployments, and golden images to maintain end-to-end supply chain security.
Troubleshoot complex issues related to embedded cryptography, TLS/mTLS, certificate lifecycle tools, and secure bootloaders.

Benefits

Fuel Your Life program to support your physical, financial, social, and emotional well-being
Paid holidays and generous time away policies
No-cost mental health support through Employee Assistance Programs
Living Proof program to recognize your peers’ extra effort with points redeemable for rewards
Eight Employee Resource Groups to foster a collaborative culture and expand your network
Unparalleled professional growth with training, development, and internal mobility opportunities
Medical, dental, vision, life, and disability insurance options available from day one
Retirement planning and discounted shares with the Employee Stock Purchase Plan
Tuition assistance and reimbursement program
Paid parental, caregiver, and military leave