About Canonical

Canonical, the company behind Ubuntu Linux, is the leading force in open source innovation. As the most widely used Linux distribution, Ubuntu powers the security of the entire internet, from cloud infrastructure to edge devices. Canonical's mission is to deliver the world's best open source platform, setting the highest standards for software security across desktops, servers, Kubernetes, and OpenStack. With a remote-first culture, Canonical employs top talent worldwide, fostering collaboration through twice-yearly in-person sprints. Join a global team dedicated to protecting millions of users and driving the future of secure open source software.

Role Overview

The Engineering Manager - Security Standards and Hardening role at Canonical is pivotal in safeguarding Ubuntu's ecosystem. This position involves leading a team of security experts to certify core components against industry standards like FIPS 140, CIS, STIG, FedRAMP, and the new CRA. You'll collaborate with partners such as CIS and DISA to define secure OS deployments, guide development teams on best practices, and ensure Ubuntu meets stringent security requirements for cloud, edge, and enterprise environments. As a line manager, you'll nurture talent from graduates to seniors, driving innovation in cryptographic modules and system hardening. This worldwide remote role offers the chance to leave a lasting legacy on the digital landscape.

Key Responsibilities

• Lead and develop a diverse team of engineers, providing coaching, mentoring, and career development feedback.
• Identify and measure team health indicators to maintain high performance.
• Implement disciplined engineering processes and evangelize best practices organization-wide.
• Represent your team and security products to stakeholders, partners like CIS and DISA, and customers.
• Plan and manage progress on goals, including FIPS 140 cryptography modules and system hardening initiatives.
• Support products to achieve compliance with FIPS, CIS, STIG, FedRAMP, and CRA standards.

Qualifications & Requirements

Canonical seeks candidates with an exceptional academic track record from high school and university, typically holding an undergraduate degree in Computer Science or a related STEM field—or a compelling alternative path. Essential experience includes working on FIPS/Common Criteria certified products, in-depth knowledge of standards, and hands-on work with DISA-STIG or CIS benchmarks, including audit and remediation tools like Compliance as Code. You must demonstrate a passion for software security, solid agile development experience, and a proven track record of developing people. Excellent verbal and written English communication, organizational skills, and the ability to build trust are crucial. Candidates should be result-oriented, drive continual learning, and be willing to travel twice yearly for up to two weeks per company event. Optional but valued: hands-on knowledge of Linux cryptography libraries like OpenSSL and GnuTLS.

Benefits & Perks

Canonical offers competitive, performance-based compensation reviewed annually, with additional bonuses for outstanding results. Enjoy a fully distributed work environment tailored to global needs, ensuring fairness and balance. Key perks include a personal learning and development budget of USD 2,000 per year, twice-yearly in-person team sprints for collaboration, and comprehensive benefits reflecting Canonical's values. Work from anywhere worldwide in this home-based role, with opportunities for career advancement in a supportive, innovative culture.

Career Growth

At Canonical, engineering managers thrive through robust career guidance and development programs. You'll grow by leading high-impact projects, mentoring rising stars, and representing security initiatives to global partners. The company's commitment to continual learning, combined with your personal development budget, supports skill expansion in emerging threats and standards. With a track record of promoting from within, Canonical provides clear paths to senior leadership, fostering long-term success in open source security.

Why Join Canonical

Join Canonical to work on Ubuntu, the backbone of secure cloud and edge computing, impacting millions worldwide. In a remote-first culture, collaborate with security experts, innovate on FIPS and STIG compliance, and contribute to open source's future. Canonical's global team values drive, excellence, and community, offering unparalleled opportunities to make a tangible difference in digital security.

Role FAQs

Q: Is this role remote? Yes, it's home-based worldwide with twice-yearly travel for events.
Q: What security standards will I work on? FIPS 140, CIS, STIG, FedRAMP, CRA, and system hardening.
Q: What experience is required? Prior FIPS/Common Criteria work, STIG/CIS benchmarks, and team leadership.
Q: How does Canonical support career development? Through mentoring, learning budgets, and annual reviews.
Q: What's the team structure? Engineers from graduate to senior levels in security standards.