Product Security Engineer - Cryptography and PKI

Product Security Engineer, Cryptography & PKI

San Carlos, CA (on-site)

About 1X
We build humanoid robots that work alongside people to solve labor shortages and create abundance.

The Role
As a Product Security Engineer specializing in cryptography and PKI, you will build and scale the cryptographic infrastructure that secures 1X’s robots and communications. Your work will ensure trust, integrity, and long-term security across the company’s hardware and software systems.

You Will

• Design and manage end-to-end cryptographic services, including PKI and key lifecycle management

• Establish HSM infrastructure as the root of trust for firmware signing and IoT authentication

• Lead the evaluation, procurement, configuration, and integration of HSM vendor solutions

• Architect scalable key management systems for future growth

• Design remote device attestation mechanisms leveraging technologies such as fTPM or OP-TEE

• Build and automate secure pipelines for firmware and bootloader signing

• Define infrastructure and policies for author key provisioning, rotation, and destruction

• Secure build systems and code-signing workflows

• Develop factory provisioning architecture for mass key and certificate distribution

• Support secure communication protocol development

• Collaborate with cross-functional teams including Product Security, Cloud Infrastructure, Device Engineering, and SecOps