Micah Dumont

Senior Software Engineer – Product Cybersecurity

As a Senior Software Engineer at Toyota Motor North America, I lead the architecture and development of critical cybersecurity platforms and secure vehicle-to-cloud services for connected and electric vehicles. My work focuses on building scalable, high-security systems that protect vehicle data, enable secure communications, and support modern EV features such as Plug and Charge.

Key Contributions (2022 – Present)

• OAuth 2.0 Framework
  Led design and implementation of a comprehensive OAuth 2.0 framework supporting PKCE, Authorization Code, and Client Credentials flows for multiple internal services.
• Secure Key Exchange Service
  Architected an automated ECDH Key Derivation service using AWS KMS and Secrets Manager, enabling secure real-time vehicle telemetry key exchange.
• Plug and Charge (PnC) Infrastructure
  Designed and implemented the V2G Root bundle installer and workflow persistence mechanisms for Plug and Charge, supporting secure automated EV payments.
• Cryptographic Proxy & Libraries
  Architected a high-performance PKCS11 proxy supporting Luna HSM and AWS CloudHSM backends. Built core Golang cryptographic libraries, configuration stack, caching middleware, and REST/gRPC APIs for Toyota 2024 and 2021 vehicle models.
• Secure Boot & Signing Solutions
  Engineered secure boot services and Microsoft Authenticode signing solutions using Golang, AWS Lambda, Docker, and on-premises HSMs.
• mTLS 1.3 Infrastructure
  Developed and deployed mTLS 1.3 infrastructure with automated certificate chain management tooling, reducing manual security operations by ~70%.
• CI/CD & Automation
  Led CI/CD automation initiatives using Python, GitHub Actions, SonarQube, and Terraform, increasing test coverage by 45% and significantly improving deployment reliability.
• Team Leadership
  Mentored 5+ junior engineers on secure Golang development, system design, and cryptographic best practices. Established team coding standards and created architectural documentation (C1-C4 models, sequence diagrams) adopted across the Product Cybersecurity Group.

Previous Role – Senior Security Analyst (Oct 2019 – Feb 2022)

Prior to my current role, I served as a Senior Security Analyst where I developed secure backend services and automation platforms for vehicle cybersecurity and vulnerability management.

• Built cloud-native AWS Lambda services that automated vulnerability report ingestion and Jira integration workflows.
• Designed automated security vulnerability management pipelines using AWS S3, Lambda, SNS, and Python, accelerating remediation processes.
• Developed a dynamic SharePoint permissions service integrated with Jira workflows.
• Contributed to the architecture of the Test Automation Platform (TAP) for cloud-based vehicle system testing.
• Supported development of Toyota 2021 cryptographic libraries protecting ECU software.

These initiatives have strengthened Toyota’s cybersecurity posture across its connected and electric vehicle lineup while establishing robust, maintainable platforms used in production environments.