Embedded Platform Security amp; Cryptography Engineer
External job listingat Pointsys
π Weβre Hiring: Embedded Platform Security amp; Cryptography Engineer π Location: St. Louis, MO (Onsite) π’ π° Rate: C2C We are looking for an experienced Embedded Platform Security amp...
Salary
Not provided
Location
St. Louis, United States
Employment type
Full time
Workplace
Not provided
Embedded Platform Security amp; Cryptography Engineer
St. Louis, United States
Job description
π Weβre Hiring: Embedded Platform Security amp; Cryptography Engineer π Location: St. Louis, MO (Onsite) π’ π° Rate: C2C We are looking for an experienced Embedded Platform Security amp; Cryptography Engineer to design and implement end-to-end device security for embedded Linux products based on the Microchip SAMA7 (Arm Cortex-A7) platform. Key Responsibilities Implement secure boot and hardware Root of Trust on ARM-based platforms. Develop verified boot chains using AT91Bootstrap, U-Boot signed FIT images, and dm-verity. Integrate secure elements such as Microchip ATECC608 or TA100, or TPM 2.0.Design cryptographic key hierarchies, device identity, PKI, and X.509 certificates. Implement firmware signing, secure storage, and authenticated firmware updates with anti-rollback protection. Develop manufacturing provisioning workflows and HSM-backed key management processes. Support security architecture documentation, threat modeling, penetration testing, and product security certification. Required Skills8β12 years of embedded software engineering experience, including 5+ years in embedded Linux security. Production experience implementing secure boot on ARM Cortex-A platforms. Hands-on secure element or TPM 2.0 integration and provisioning. Strong knowledge of C, U-Boot, Yocto/Buildroot, Linux kernel, and device trees. Experience with cryptography, PKI, TLS, firmware signing, and HSM-based key management. Familiarity with IEC and NIST security standards. Preferred Qualifications OP-TEE and Arm TrustZone experience. FIPS 140-3, Common Criteria, PSA Certified, or SESIP certification experience. Knowledge of NIST SP 800-193 and the EU Cyber Resilience Act. π© Interested candidates: Please share your updated resume at. Note: No H-1B, CPT, or OPT candidates. #Hiring #EmbeddedLinux #CyberSecurity