Job Specifications
About the company
A specialist in identity, secure transactions, and digital services, IN Groupe is the global leader in secure identity and trust services. Every day, our 4,000 employees across 40 countries work to ensure that everyone has access to a reliable and secure identity, both in the physical and digital worlds. With our solutions and our international network of 10 R&D centers, we support governments and businesses in more than 130 countries.
Joining IN Groupe means helping to shape the future of the identity and secure transaction market. Become part of our international teams — driven by innovation and proud to design solutions that make life easier and protect personal data for millions of people around the world.
About the role
As a Formal Methods Engineer in the embedded R&D team, you will work on critical embedded components requiring high levels of security, performance, and robustness. You will be contributing to smartcard operating systems, JCVM, and cryptographic libraries, ensuring formal verification of critical code and compliance with certification standards (Common Criteria, FIPS, etc.). The Embedded R&D team collaborates closely with Business Product Lines as well as evaluation and certification bodies, and is composed of experts in secure embedded software development.
Main responsibilities
Develop and maintain functional and security specifications for identity (ID) components
Perform formal analysis and verification of critical code on smartcard platforms
Formally demonstrate code compliance with security requirements (memory safety, isolation, access control, state and privilege management)
Produce formal evidence required for evaluations and certifications (Common Criteria, FIPS, regulatory schemes)
Ensure traceability between requirements, specifications, models, and implementations
Identify and address logical and structural vulnerabilities impacting assurance levels
Contribute to the preparation and support of security audits and evaluations of the code
Work closely with R&D teams to integrate formal verification into the industrial development cycle
Analyze and introduce, when relevant, optimization or automation approaches (AI) to improve the efficiency of analyses and evidence production
About you
Education: Engineering degree, Master’s (Bac+5) or higher (PhD preferred) in computer science, applied mathematics, security, or formal logic.
Experience: Proven experience in formal methods and critical software verification, ideally in embedded environments.
Language: Proficiency in English.
Technical competencies:
Proficiency with one or more formal proof and analysis tools and approaches (e.g., Rocq, Why3, Frama-C, Jasmin, BINSEC)
Significant experience in verifying embedded C code
Ability to produce formal evidence suitable for certification
Personal skills: Strong teamwork abilities, autonomy, effective interpersonal communication. Strong rigor, analytical mindset, and ability to act as a technical reference.
Skilled in formal verification of security protocols and critical codebases (C, JavaCard, binaries)
Strong ability to optimize algorithms and manage performance constraints in embedded environments
Deep awareness of physical and logical attack vectors targeting smartcards and embedded systems, with a focus on prevention and resilience
Excellent analytical and synthesis capabilities, with a high level of responsiveness and technical rigor
Nice to have skills
Good understanding of smartcard architectures, constrained environments, and secure life cycles
Expertise in applied cryptography, secure identification protocols, and underlying mathematics
Deployment of automated or AI-based solutions for formal analysis and vulnerability detection
About the Company
A partner of the French government for close to 500 years, IN Groupe offers identity solutions and secure digital services, at the leading edge of technology and integrating electronics and biometrics.
From components to services and from documents to interoperable systems, IN Groupe is a global specialist in identity and secure digital services. The institution plays a daily role in facilitating everyone's life: helping states exercise their sovereignty, citizens protect their identity and businesses preserve their integri...
Know more