Rivian and Volkswagen Group Technologies
Senior Product Security Engineer
Irvine, Orange County · Senior · Full-time
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →H-1B wage level
the lottery is wage-weighted — each level is one more entry
$5,701 more — $155,501 — moves this role to Level IV and 4 lottery entries. That figure is inside the range the employer already advertised.
Based on the DOL prevailing wage for this occupation and worksite, a base salary of $155,501 would place this position at wage Level IV. That figure is within the posted range, and I'd like to target it. This role classifies under "Computer Occupations, All Other" for prevailing-wage purposes.
DOL prevailing wage, 2026-27 wage year · Computer Occupations, All Other (15-1299) · Los Angeles-Long Beach-Anaheim, CA. Wage level is derived by USCIS from the offered wage, occupation and worksite; the occupation shown is inferred from the job title.
Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- From operating systems to zonal controllers to cloud and connectivity solutions, we're addressing the challenges of electric vehicles through technology that will set the standards for software-defined vehicles around the world.
- By combining our expertise across connectivity, AI, security and more, we'll map a new way forward.
- Payments are discretionary and not guaranteed; actual amounts depend on company results and the terms of the plan in effect, and require active employment at the time of payout.
Responsibilities
- Own PKI and certificate lifecycle management: design, issue, provision, renew, and revoke certificates across the systems you support; maintain trust stores and certificate authorities.
- Apply charging-standard expertise: work with EV charging PKI and protocols (e.g., ISO 15118 Plug & Charge, OCPP) to support certificate provisioning and interoperability for charging use cases.
- Design and implement authN/authZ: apply standards such as X.509, mTLS, OAuth2, and OIDC to secure service-to-service and client-facing authentication and authorization flows.
- Build and operate platform infrastructure: work with Kubernetes, service mesh, and workload identity technologies to move cert issuance and auth off bespoke one-off solutions and onto shared, reusable infrastructure.
- Support secure boot and key management: contribute to signature validation, key revocation, and related secure-provisioning workflows.
- Operate what you build: deploy, monitor, and support production services (GitOps deployment, observability/tracing), and be a responsive point of contact when certificate or auth issues arise.
- Document and mentor: write clear design docs and runbooks, and help other engineers ramp up on PKI and platform concepts.
- We build the exceptional - and we believe the people doing that work should be rewarded accordingly.
- Experience designing API gateway/ingress patterns for external or partner-facing traffic, including mTLS termination and identity-provider integration.
Requirements
- 5+ years in security engineering with hands-on, production experience in PKI and certificate lifecycle management (issuance, provisioning, renewal, revocation).
- Working knowledge of authN/authZ standards (X.509, mTLS, OAuth2, OIDC) and experience implementing them in production systems.
- Familiarity with EV charging PKI or charging communication standards (e.g., ISO 15118, OCPP), or comparable domain-specific PKI experience.
- Proficiency in at least one backend language (Go, Python, or similar) and experience building/operating production services.
- Experience with service mesh and workload identity technologies (e.g., Istio, SPIRE/SPIFFE, Cilium/eBPF).
- Experience operating cloud infrastructure with strong observability practices (metrics, tracing, logging).
Nice to have
- Exposure to intrusion detection or broader security monitoring across distributed systems.
- Experience in a regulated or safety-critical industry.
- Track record contributing to cross-functional security architecture decisions at scale.
- Strongly preferred:
Compensation
- $150k-$206k
Benefits
- In addition to a competitive base salary, full-time positions may be is eligible to participate in our annual company performance bonus program.
- This role is also eligible for equity in the form of Restricted Stock Units (RSUs), subject to board approval and the terms of our equity incentive plans, including applicable vesting requirements.
- Learn more about our global benefit programs.
Company info
- Rivian and Volkswagen Group Technologies is a joint venture between two industry leaders with a clear vision for automotive's next chapter.
- The road to the future is uncharted.
- Working together, we'll create a future that's more connected, more intelligent, more sustainable for everyone.
- Role Summary
- We're looking for a senior/staff security engineer who is a genuine PKI expert, comfortable owning certificate lifecycle management end-to-end and who also brings solid platform/infrastructure experience.
- You'll help us run and modernize the systems that issue, provision, and manage digital identity for our products, with particular depth needed in charging standards (e.g., ISO 15118, OCPP) and authN/authZ standards (e.g., X.509, mTLS, OAuth2, OIDC).
Equal opportunity
- Rivian and Volkswagen Group Technologies is committed to creating a diverse environment and is proud to be an equal opportunity employer.
- All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender, gender expression, gender identity, genetic information or characteristics, physical or mental disability, marital/domestic partner status, age, military/veteran status, medical condition, or any other characteristic protected by law.
- We are also committed to ensuring compliance with all applicable fair employment practice laws regarding citizenship and immigration status.
- Rivian and Volkswagen Group Technologies is committed to ensuring that our hiring process is accessible for persons with disabilities.
Visa & Work Authorization
- We are also committed to ensuring compliance with all applicable fair employment practice laws regarding citizenship and immigration status
This listing is sourced directly from Rivian and Volkswagen Group Technologies's careers page and normalized into a canonical job model.