FIPS Tester II Entropy (Part Time) Ottawa, ON
at EWA Canada

Job Description

Intertek EWA is looking for a Part Time FIPS Tester II to join our team in Ottawa, ON. 

*Based on a candidate geographical location, we are open to this position being Hybrid or Remote.

Job Overview

Intertek EWA-Canada is searching for a Part Time FIPS Tester II with experience in entropy source analysis to join our Connected World team. This position will specialize in the requirements for Entropy Source Validation (ESV).

The Part Time FIPS Tester II will be a part of the High Security Certification team that will be part of the team that assesses the compliance of cryptographic modules against the Federal Information Processing Standard Information Technology (FIPS) 140-3 and ISO 19790/24579 Security Evaluation standard as well as Entropy Source Validation (ESV). 

The successful candidate will join an existing successful Entropy team that addressed all the entropy certification requirements for both FIPS and Common Criteria submissions for all of Intertek's Certification Laboratories which includes Acumen Security and EWA-Canada.

EWA-Canada has a proven track record in hardware based Cryptographic Modules Security Level 3. EWA-Canada is a center of excellence in all aspects of entropy analysis for vendors with both physical and non-physical noise sources. We have deep expertise in semi-conductors and an ever-growing set of Stochastic Models we adapt for various types of noise sources.

EWA-Canada is unique in our ability to offer staff the possibility to work in both domains while being able to offer experts a satisfying career that specializes in entropy or cryptographic modules. This job description therefore will include the requirements for cryptographic module specialist 

Scope of Work

• Entropy specialist:
  • High degree of proficiency for all aspects of ESV submissions.
  • Analysis and testing for non-physical entropy sources.
  • Create Entropy Assessment Reports (EAR) for FIPS and Common Criteria projects. 
    This includes either creating the Stochastic Model or Heuristic Argument or peer reviews of other existing mathematicians in the ESV team.
  • Prepare and submit ESV packages to NIST/CMVP
• For the record Cryptographic Module specialist: 
  • High degree of proficiency in FIPS 140-3 module validations.
  • Lead CAVP algorithm testing using ACVP/ACVTS.
• Lead customer Gap Analysis workshops and create related documentation.
• Project point of contact (POC) with NIST/CMVP and technical POC with customers.
• Assist in the development and review of all test reports and required certification documentation.
• Review/comment submission-related output from other FIPS Testers.
• Provide technical assistance and mentorship to FIPS Testers.
• Participate in industry groups and conferences including presentations.
• Perform other duties as required.

Who We're Looking For

• Bachelor's degree in electronic or electrical engineering or a related field, or an equivalent combination of education, training, and experience.
• Entropy specialist requirements:
  • Advanced knowledge of and experience applying the concepts of NIST SP 800-90B. A strong background is statistics is essential.
  • Advanced knowledge, experience, and training in entropy sources and shall have a working knowledge of FIPS approved and NIST-recommended cryptographic algorithms and the test environment for ESV services.
  • Background in any of the following: digital or analog circuits, stochastic modelling, or interrupt processing or other events in computing systems.
  • Ability to author Entropy Assessment Reports (SP800-90B analysis). 
  • NIST/CMVP ESV certification or ability to gain certification within 180 days of employment.
• Cryptographic Module specialist requirements: 
  • Experience in leading at least five (5) full FIPS validations.
  • 1.5 to 2 years of experience in FIPS algorithm testing (CAVP/ACVTS), operational testing, documentation creation (Security Policy, Validation Report) and source code reviews.
  • CVP, or ability to obtain CVP within 180 days of employment.
• Ability to work well individually as well as in a team environment.
• Positive attitude with excellent analytical and communication skills, both verbal and written.
• Desire to learn new products and technologies.
• Commitment to high standards of ethics, regulatory compliance, customer service and business integrity.
• Hands-on user interface experience and command line fluency on Windows and Linux.
• Ability to read computer code in languages such as C, C++, Python, and/or Java.
• Hands-on experience working with MS Office or equivalent.
• Model Intertek's 10X Energies at all times within the workplace, practicing business the right way.
• Be aware of, and adhere to, safety practices and policies to ensure your own safety, as well as the safety of others who may be affected by your actions at work.
• Ability to work in fast-paced, multi-tasking environment with shifting priorities and demanding deadlines.
• Must be detailed-oriented and able to prioritize and organize workload, with efficient time management.
• Ability to communicate and interact effectively in verbal written and presentation formats.
• Must possess the fundamental technical and administrative skills required to perform the job duties.
• Must be customer focused and quality driven.
• Ability to travel as business needs dictate.

Preferred Requirements and Qualifications for this post:

• Core mathematical areas include calculus (differential and integral), linear algebra (vectors and matrices), differential equations (modeling dynamic systems), complex numbers, Fourier and Laplace transforms (signal analysis), probability and statistics (noise and reliability), and Boolean algebra (digital electronics)
• Strong background in embedded Linux development especially on custom SoCs. Experience in SoC Ring 0 bootloaders and the secure boot sequence if advantageous. Experience with JENT Kernel mode ESV submissions would set the candidate apart.
• Ability to develop software for various analytic tool chains EWA-Canada has as well as Stochastic models.
   

Intertek's Commitment

Intertek is a world leader in the Quality Assurance market, with a proven, high-quality business model and a global network of customer-focused operations and highly engaged subject matter experts. With passion, pace, and precision we work to exceed our customers' expectations, while engaging with our employees to be 10X in their performance and professional growth.

Our Culture of Total Quality Assurance 

Intertek promotes a culture where motivated, customer-oriented employees can flourish, experience professional fulfillment, and reach their highest potential. At Intertek, we exercise our spirit of innovation, the passion of our people and our unmatched customer commitment to realize our purpose of making the world an ever better, safer, and more sustainable place for all. 

A career with Intertek offers rewarding opportunities to help companies around the world develop products that are used safely by millions of people every day. Intertek is the trusted advisor to many of the world's leading brands, companies, and governments, and has earned a reputation for accuracy, reliability, integrity, and technical competence.  Working at Intertek means joining a global network of state-of-the-art facilities and passionate people who deliver superior customer service with a purpose of bringing quality, safety, and sustainability to life.

We Value Diversity

Intertek's network of phenomenal people are our greatest assets, and the diversity they bring fuels our success. Intertek is an Equal Employment Opportunity Employer that values inclusion and diversity. We take affirmative action to ensure all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other legally protected characteristics.

For individuals with Disabilities, who would like to request accommodation, or who need assistance applying, please email hr.canada@intertek.com

Please apply online at Intertek Canada Careers (oraclecloud.com) 

*Intertek does not accept unsolicited approaches from agencies and will not pay a fee for any placement resulting from the receipt of an unsolicited resume. 

CA-CL1

#LI-CL2

#LI-Remote