Remote Embedded Security Engineer: Secure Boot & TEEs

BairesDev; Chile; Remote; CLP 88,063,000 - 136,986,000; Full time

Benefits offered by this job

Remote work

Home office setup provided

Flexible schedule

Paid parental leave

Paid vacations

National holidays

Job summary

BairesDev is seeking an Embedded Security Engineer to architect secure boot, build a hardware root of trust, and harden embedded Linux across the boot chain. You will design TEEs, enable trusted apps, and automate signing in CI/CD for secure product delivery.

5+ years in embedded security with Linux, strong C skills, and experience with U-Boot, Yocto, and ARM TrustZone are required. This is a 100% remote role with global collaboration and flexible scheduling.

Qualifications

• 5+ years of experience in embedded systems engineering with a security focus.
• Strong expertise in embedded Linux security, including dm-verity, dm-crypt, and ARM TrustZone EL1-EL3.
• Proven experience designing hardware root of trust and Secure Boot from scratch, including U-Boot Verified Boot from bootloader through kernel.
• Experience with embedded Linux board bring-up and BSP customization using Yocto.
• Background with TEE development and trusted application authoring using OP-TEE.
• Strong C skills with Python or Bash scripting.
• Advanced proficiency in English.

Responsibilities

• Architect and implement Secure Boot from bootloader through kernel, building a hardware root of trust from scratch.
• Harden storage using dm-verity and dm-crypt.
• Stand up a Trusted Execution Environment and author trusted applications.
• Enforce user-space sandboxing and access control mechanisms.
• Automate cryptographic signing pipelines in CI/CD against a signing backend.

Skills

Embedded systems

C programming

Python scripting

English proficiency

Tools

Yocto

OP-TEE

U-Boot

ARM TrustZone

Job description

BairesDev is seeking an Embedded Security Engineer to architect secure boot, build a hardware root of trust, and harden embedded Linux across the boot chain. You will design TEEs, enable trusted apps, and automate signing in CI/CD for secure product delivery.

5+ years in embedded security with Linux, strong C skills, and experience with U-Boot, Yocto, and ARM TrustZone are required. This is a 100% remote role with global collaboration and flexible scheduling.