Embedded Platform Security and Cryptography Engineer

Tasks

• Implement secure boot and hardware Root of Trust on ARM Cortex-A platforms.
• Develop verified boot chains using U-Boot, signed FIT images, and dm-verity.
• Integrate secure elements/TPM 2.0 for hardware-backed key storage and provisioning.
• Implement PKI, X.509 certificates, firmware signing, and cryptographic key management.
• Develop secure firmware updates with anti-rollback protection.
• Work with embedded Linux, C, Yocto/Buildroot, and Linux kernel configurations.
• Support product security compliance and certification requirements.

Requirements

• 8–12 Years
• Independent candidates only
• 8+ years in embedded software, including 5+ years in embedded Linux security.
• Production experience with Secure Boot on ARM MPU platforms (Microchip SAMA7/SAMA5 preferred).
• Hands-on Secure Element/TPM 2.0 integration and provisioning.
• Strong knowledge of cryptography, PKI, HSM, and code signing.
• Experience with C, U-Boot, Yocto/Buildroot, and Linux kernel/device tree.
• Experience designing security architecture and key management processes.

Schedule

• 100% Onsite

How to apply

• Send your updated resume via email.

Location

• St. Louis, MO