Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Cybersecurity Lead - Product Security (Network Hardware & OS) 1 role.

Rezi rewrites your resume against Celestica International LP's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Cybersecurity Lead - Product Security (Network Hardware & OS) 1 posting at Celestica International LP — free, in seconds.

About the Role

Seeking an experienced Product Security Lead to own and drive the code signing operating model for Hardware Platform Solutions (HPS) Software Engineering teams. This role involves ensuring secure, supportable, and production-ready signing infrastructure, certificates, key management, and processes, while standardizing signing methods across Linux and Windows environments.

Responsibilities

Design, roll out, and govern the HPS code signing capability, supporting a secure software chain of custody.
Establish and maintain approved signing standards and integration patterns across Linux and Windows development environments.
Formulate standard operating procedures (SOPs), governance controls, and self-service onboarding guidance.
Manage the lifecycle, provisioning, and distribution of signing certificates, cryptographic keys, signing policies, and signing packages.
Partner with Enterprise Information Security and external vendors to deploy, configure, and maintain AppViewX PKI+ and HSM-backed signing services.
Guarantee integrity, control, and traceability of signing assets and workflows.
Identify, assess, and resolve security risks associated with signing deployments.
Track and address limitations in unsupported or non-standard engineering tools, defining compliant alternative paths.
Collaborate with security architects to define support models aligning with enterprise zero-trust principles.
Serve as the primary technical enablement lead for Software Engineering and DevOps teams.
Lead proof-of-concept (POC) evaluations, transition frameworks, and operational readiness reviews.
Participate in defining the long-term architecture for secure product identities, hardware attestation, and localized certificate authority (CA) infrastructures.
Partner with product management and engineering leadership to translate evolving customer security needs into scalable security capabilities.

Requirements

Minimum of 7+ years of experience in product security, application security, PKI, code signing infrastructure, platform security, or DevSecOps within active engineering or R&D environments.
Demonstrated experience operating in complex matrix environments, effectively bridging the technical gaps between enterprise IT security policies and agile software developer workflows.

Skills

PKI & Key Management: Deep conceptual and practical understanding of Public Key Infrastructure (PKI), certificate lifecycle management, cryptographic hashing, key escrow, and secure release governance.
Signing Toolchains: Hands-on experience implementing and troubleshooting developer signing workflows, specifically using OpenSSL (Linux/Windows) and Microsoft Signtool.
HSM & KMS Platforms: Direct experience with HSM-integrated signing systems, PKCS#11 API integrations, and vendor-managed signing controllers (such as AppViewX PKI+).
Systems & Automation Environment: Working knowledge of modern CI/CD pipelines (e.g., Azure DevOps, Jenkins, GitLab), automated test environments, and package validation processes.
Technical Documentation: Strong ability to write high-quality, clear operational playbooks, developer guides, and compliance standards.
Background supporting security controls for embedded systems, firmware development (e.g., AMI BIOS/BMC toolchains), or hardware component signing.
Familiarity with secure boot architectures and device identity frameworks (such as iDevID, IEEE 802.1AR attestation, and dedicated/subordinate CA hierarchies).
Industry-recognized security credentials, such as CISSP, CSSLP, or vendor-specific PKI/HSM engineering certifications.
Collaborative Communicator: Ability to build strong consensus and drive security standards across highly diverse engineering, IT, operations, and external vendor teams.
User-Centric Pragmatism: A track record of balancing rigorous security compliance with developer usability, designing solutions that minimize friction and preserve engineering velocity.
Sovereign Problem Solver: Comfortable navigating strict architectural constraints where automated standard enterprise agents are blocked or restricted.

Location

Canada
Ontario
Toronto

Work Type

Office environment

Experience Level

Minimum of 7+ years of experience

Education Level

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Software Engineering, or a related technical field.

About the Company

Celestica (NYSE, TSX: CLS) enables the world's best brands. Through our recognized customer-centric approach, we partner with leading companies in Aerospace and Defense, Communications, Enterprise, HealthTech, Industrial, Capital Equipment and Energy to deliver solutions for their most complex challenges. As a leader in design, manufacturing, hardware platform and supply chain solutions, Celestica brings global expertise and insight at every stage of product development – from drawing board to full-scale production and after-market services for products from advanced medical devices, to highly engineered aviation systems, to next-generation hardware platform solutions for the Cloud. Headquartered in Toronto, with talented teams spanning 40+ locations in 13 countries across the Americas, Europe and Asia, we imagine, develop and deliver a better future with our customers.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Celestica's policy on equal employment opportunity prohibits discrimination based on race, color, creed, religion, national origin, gender, sexual orientation, gender identity, age, marital status, veteran or disability status, or other characteristics protected by law. This policy applies to hiring, promotion, discharge, pay, fringe benefits, job training, classification, referral and other aspects of employment and also states that retaliation against a person who files a charge of discrimination, participates in a discrimination proceeding, or otherwise opposes an unlawful employment practice will not be tolerated. All information will be kept confidential according to EEO guidelines.