Senior Embedded Linux Security Engineer - Secure Boot & TEE

BairesDev; Bogotá; A distancia; COP 343.653.000 - 531.101.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

Flexible hours

Parental leaves and vacations

Global team mentorship

Descripción de la vacante

BairesDev is seeking an Embedded Linux Security Engineer to advance Secure Boot and security hardening across embedded Linux platforms. You will work on hardware root of trust, kernel protections, and trusted applications, ensuring robust cryptographic signing and OS-level sandboxing.

Join a 100% remote team with flexible hours and competitive USD compensation, collaborating with the global Top 1% of tech talent.

Formación

• 5+ years of experience in embedded Linux engineering with a security focus.
• Strong expertise in embedded Linux security, including dm-verity, dm-crypt, and ARM TrustZone EL1-EL3.
• Proven experience designing hardware root of trust and Secure Boot from scratch, including U-Boot Verified Boot from bootloader through kernel.
• Experience with embedded Linux board bring-up and BSP customization using Yocto.
• Background with TEE development and trusted application authoring using OP-TEE.
• Strong C skills with Python or Bash scripting.
• Advanced proficiency in English.

Responsabilidades

• Build Secure Boot architecture on embedded Linux, from hardware root of trust through the kernel.
• Harden the Linux storage stack using dm-verity and dm-crypt.
• Stand up a Trusted Execution Environment and author trusted applications within the Linux security model.
• Enforce Linux-level user-space sandboxing and access control.
• Automate cryptographic signing pipelines in CI/CD against a signing backend.

Conocimientos

Embedded Linux

Security

dm-verity

dm-crypt

TrustZone

U-Boot

Yocto

OP-TEE

C programming

Python

Bash

English

Verified Boot

Herramientas

ARM TrustZone EL1-EL3

Descripción del empleo

BairesDev is seeking an Embedded Linux Security Engineer to advance Secure Boot and security hardening across embedded Linux platforms. You will work on hardware root of trust, kernel protections, and trusted applications, ensuring robust cryptographic signing and OS-level sandboxing.

Join a 100% remote team with flexible hours and competitive USD compensation, collaborating with the global Top 1% of tech talent.