Senior Infrastructure Engineer

Job Summary

MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations.

Learn More:

https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

MathWorks is seeking a code signing infrastructure engineer to help design, implement, and maintain the systems that digitally sign our software to ensure its authenticity and integrity. The ideal candidate will possess a strong understanding of cybersecurity, software development, and infrastructure management, leveraging experience in both software engineering and IT infrastructure to protect against tampering and ensure trust in our software. MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence. Responsibilities Use automation tools and frameworks to deploy and maintain the secure systems and infrastructure used for code signing as it is an integral process of our highly automated CI/CD pipeline Perform security threat modeling for our different continuous integration systems and release pipelines to identify security issues and risks and recommend mitigation strategies Procure and maintain the production code signing certificates used to sign MathWorks production products and release artifacts Implement processes to verify that software is from a trusted author and has not been altered Establish and utilize comprehensive monitoring, logging, and alerting systems to troubleshoot issues and proactively enhance system reliability and security Stay on top of code signing and OS level security landscape and requirements associated with different release containers to ensure our release artifacts meet those security standards Develop and enforce security policies related to code signing, monitoring for threats, and conducting security assessments Work with software developers and security teams to integrate code signing into the software development lifecycle Help product teams debug customer signing issues Qualifications A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required. Additional Qualifications Experience programming and debugging in C/C++ and a scripting language like Python Experience with SCM systems such as Git or Perforce Experience with configuration management tools like Ansible, Chef, Puppet etc. Demonstrate strong debugging skills (tracing tools like strace, dtrace,and bpftrace) Experience in designing, building, and maintaining IT infrastructure, including servers, networks, and cloud environments Familiarity with certificate management and the underlying technology for digital signatures Familiarity with zero-trust architecture and secure software supply chain practices Experience in networking filesystems protocols like

SMB, NFS

; working with Linux, Windows, and MacOS Experience with Software Defined Networking (SDN) is a plus