Principal Product Security Architect - Common Criteria, SESIP, PSA Certified, FIPS 140-3, ISO 21434, EU-CRA

Principal Product Security Architect - Common Criteria, SESIP, PSA Certified, FIPS 140-3, ISO 21434, EU-CRA - France - €105,000 - €130,000

Relocation and visa sponsorship provided.

Our client is seeking a Principal Product Security Architect to lead product security evaluations and certification programmes.

This is a senior role within the Product Security team for someone who can connect deep technical expertise with the rigour of independent assurance. You will work directly with accredited security laboratories and certification bodies, coordinate evaluation evidence, validate findings and guide engineering teams through corrective actions, retesting and certification closure.

Duties and responsibilities

• Own end-to-end security evaluation and certification programmes: planning, execution, evidence delivery, remediation, retesting and closure.
• Be the primary technical contact for external security laboratories, ensuring documentation, test vectors and evaluation artefacts are complete, accurate and delivered on schedule.
• Bring expertise in silicon/SoC security, cryptography, secure key lifecycles and provisioning.
• Mentor colleagues on evaluation methodologies and certification readiness, while maintaining clear workflows and staying current with evolving standards.

We are looking for someone with proven experience in product security, security evaluation, certification or a related field, with proven experience working with external security laboratories and navigating formal evaluations. Strong knowledge of frameworks such as Common Criteria, SESIP, PSA Certified, FIPS 140-3, ISO 21434 or EU-CRA is essential.

You should be comfortable working with cryptographic primitives, secure key lifecycle management and secure provisioning, alongside silicon/SoC security architecture, threat modelling, attacker models and countermeasures. Clear communication, negotiation and documentation skills are key to coordinating complex programmes across engineering, product and security teams.

Additional experience with cryptography accelerators, roots of trust, secure enclaves, HSMs, TEE/TF-M environments or secure firmware would be valuable. Knowledge of semiconductor manufacturing, supply chain security, side-channel analysis, fault-injection testing or hardware penetration testing would also stand out.

Please get in touch to discuss the opportunity or send your CV to Will.Martin@stottandmay.com.