Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.
What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!
The person in this role will be responsible for designing, implementing, operating, and continuously improving the cryptographic trust infrastructure that secures connected vehicles and software-defined vehicle ecosystems. This position combines expertise in Vehicle Public Key Infrastructure (VPKI), cloud security, cryptographic services, automation, and DevSecOps to ensure scalable, resilient, and secure solutions supporting global mobility patforms and connected services.
Main Activities:
• Design, deploy and maintain global Vehicle PKI services supporting vehicle identities, firmware signing, OTA security, V2X communications and connected services authentication;
• Define trust models, certificate hierarchies and cryptographic architectures aligned with cybersecurity standards and industry best practices;
• Manage certificate lifecycle processes including enrollment, provisioning, renewal, revocation and recovery;
• Design and operate cloud-native PKI services and security architectures across cloud environments;
• Develop Infrastructure as Code and automation solutions supporting PKI operations and security controls;
• Collaborate with Product Security, Engineering and Connected Services teams to integrate cryptographic controls into product development;
• Participate in cybersecurity assessments, architecture reviews and security requirement definition activities;
• Drive innovation initiatives related to cryptographic services, Zero Trust architectures, cloud security and next-generation trust technologies.