Common Criteria / FIPS Security Engineer

Zachary Piper Solutions is seeking a Common Criteria / FIPS Security Engineer to support the design, development, validation, and certification of security-focused products. This role involves collaborating with engineering teams to ensure compliance with security certification requirements and regulatory standards throughout the development lifecycle.

Responsibilities:

• Partner with engineering teams to design and develop products that meet Common Criteria and FIPS certification requirements
• Support Common Criteria certification efforts, including Security Target (ST) development, evidence collection, and certification documentation
• Assist with FIPS 140 validation activities related to cryptographic modules, libraries, and security functions
• Review product architectures, security controls, and technical documentation for certification readiness
• Translate certification and compliance requirements into engineering tasks, testing activities, and product requirements
• Evaluate products against regulatory, security, and certification standards to ensure compliance
• Support threat modeling, security design reviews, vulnerability assessments, and remediation planning
• Collaborate with Common Criteria evaluation labs, FIPS testing laboratories, product managers, and security teams throughout certification projects
• Assist with addressing findings identified during certification and validation assessments
• Support certification maintenance, recertification efforts, and evolving regulatory compliance requirements
• Develop detailed technical documentation, reports, and written communications for internal and external stakeholders
• Contribute to Secure Development Lifecycle (SDLC) processes and security best practices across product teams

Requirements:

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Technology, or a related field
• 3+ years of experience in security engineering, systems engineering, software engineering, product security, compliance, or a related technical discipline
• Experience supporting regulatory compliance, certification programs, audit activities, or security assessment initiatives
• Understanding of secure software development practices and security architecture principles
• Ability to interpret technical requirements and evaluate products against defined compliance standards
• Experience reviewing code, configurations, and technical designs to assess alignment with certification requirements
• Strong written communication and technical documentation skills
• Ability to work independently while collaborating with senior engineers and cross-functional teams
• Experience with Common Criteria (ISO/IEC 15408) certification programs
• Familiarity with Security Targets (STs)
• Familiarity with Protection Profiles (PPs)
• Familiarity with Evaluation Assurance Levels (EALs)
• Familiarity with EUCC or SOG-IS frameworks
• Experience supporting FIPS 140 validation efforts involving cryptographic modules and libraries
• Experience testing products against compliance and certification requirements
• Experience working with Cisco networking, security, or router products
• Experience within government, defense, telecommunications, or other regulated industries
• Industry certifications such as CISSP, CCSP, Security+, or equivalent
• Experience working directly with third-party testing laboratories and certification bodies