Bloomberg

The Team:
In the Software Security Platform group, our mission is to continuously improve Bloomberg’s security posture by building foundational services and libraries that enable zero-trust application architectures! Our work involves addressing security issues and problems in highly available, low latency distributed systems. The systems we build are used to secure every interaction our clients have with Bloomberg’s applications and APIs! Our clients trust us with large volumes of critical data every day, and our libraries and services are used to encrypt and protect it. We therefore pay phenomenal attention not only to security, but also to scalability and performance.

The Cryptographic Hardware Services team is entrusted with maintaining Bloomberg’s most critical cryptographic key material. Protecting the ‘keys to the kingdom’ requires we employ both innovative equipment and industry standard methodology procedures. We’re investing in this team to create a scalable solution for providing hardware-based cryptographic services to many more of the software solutions across Bloomberg. This solution will require a multi-disciplinary team for engineering components as well as automating and performing well-drilled operations.

The Role:

You will be responsible for designing and building robust and reliable distributed systems to automate the provisioning of secret material across a fleet of Hardware Security Modules (HSMs) and the libraries and services to enable other developers to easily use the HSMs-as-a-Service.

The team’s multi-disciplinary composition would consist of members experienced with the administration and operation of HSMs as well as senior engineers with deep knowledge of building resilient distributed systems. Working together, the team should foster a culture of learning and growth. 

You'll need to have:

- 4+ years of programming experience with a systems programming language (C, C++, Rust, or Golang)

- A degree in Computer Science, Engineering or similar field of study or equivalent work experience

- Experience programming applications using Hardware Security Modules (HSMs) or Trusted Platform Modules (TPMs)

- Experience designing and building scalable and robust software systems

- Good understanding of secure coding techniques and IT security principles, comprehensive automated testing and SDLC practices

We'd love to see:

- Experience managing, installing and administering Hardware Security Modules (HSMs) and associated software services

- Experience building security critical services with appropriate authentication and authorization