BootROM & Security Lead - RISC-V MPU

GlobalFoundries inc.; India; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

GlobalFoundries is building a next‑generation, application‑class RISC‑V MPU SoC platform for Linux systems – bringing together multimedia, industrial connectivity, security, and heterogeneous compute subsystems. In the Platform Software team, you’ll own secure boot and Root of Trust enablement, partnering with architecture and hardware teams.

You will help shape SoC security decisions with hands‑on data from pre‑silicon, FPGA, and first‑silicon debug as part of a strong, collaborative team.

Qualifications

• Bachelor-level engineering degree in a related field.
• 5+ years in low-level firmware/boot software and Root of Trust development on SoCs.
• Expert-level C programming and kernel-adjacent code reading.
• Strong Linux internals knowledge: boot flow, MMU, isolation, debugging.
• Hands-on SoC/platform bring-up with security/boot-stack ownership.
• Experience with U-Boot, Linux kernel, Device Tree, and Yocto/OpenEmbedded.
• Exposure to OpenSBI, secure monitor/firmware and early-boot isolation.
• RISC-V security experience or exposure to ARM TrustZone/EL3 is a plus.

Responsibilities

• Design, implement, and maintain a production-quality secure boot and RoT stack for a 64-bit RISC-V MPU platform.
• Harden boot and firmware stack: boot flow, early initialization, BootROM/FSBL, U-Boot, OpenSBI.
• Drive OS-level security enablement: kernel/BSP integration, Device Tree updates, reserved memory, firmware interfaces, secure boundaries.
• Develop and debug security components and drivers: crypto accelerators, secure storage, lifecycle/provisioning.
• Provide security collateral for SDK releases: integration, validation, and developer-facing docs.
• Perform pre-/post-silicon validation: tests on FPGA/first silicon, root-cause issues across HW/FW/kernel.

Skills

C programming

Linux internals

SoC bring-up

Security & boot stack

kernel debugging

U-Boot/Boot flow

RISC-V security

pre-/post-silicon validation

Education

B.E./B.Tech in Computer/Electrical/Electronics or related

Tools

OpenSBI

Yocto/OpenEmbedded

GDB

OpenOCD/JTAG

Lauterbach

Job description

BootROM & Security Lead – RISC-V MPU Platform BootROM & Security Lead

Build the secure boot and Root of Trust foundation for a next-gen RISC-V MPU platform.

About GlobalFoundries

GlobalFoundries is a leading full-service semiconductor foundry providing a unique combination of design, development, and fabrication services to some of the world’s most inspired technology companies. With a global manufacturing footprint spanning three continents, GlobalFoundries makes possible the technologies and systems that transform industries and give customers the power to shape their markets. For more information, visit www.gf.com.

About the Role

We’re building a next‑generation, application‑class RISC-V MPU SoC platform for Linux systems – bringing together multimedia, industrial connectivity, security, and heterogeneous compute subsystems. In the Platform Software team, you’ll own key pieces of secure boot and Root of Trust enablement, partner closely with architecture and hardware teams, and help shape SoC security decisions with hands‑on data from pre‑silicon, FPGA, and first‑silicon debug.

Key Responsibilities

• Secure boot & RoT development: design, implement, and maintain a production‑quality secure boot and Root of Trust stack for a 64‑bit RISC-V MPU platform.
• Enable and harden the boot and firmware stack (boot flow, early platform initialization, BootROM/FSBL, U‑Boot, OpenSBI/firmware handoff as applicable).
• Drive OS‑level enablement for security: kernel/BSP integration, Device Tree updates, reserved memory regions, firmware interfaces, and secure/non‑secure boundary definitions.
• Develop and debug platform security components and drivers (crypto accelerators, key services, secure storage, lifecycle/provisioning flows, anti‑rollback, and attestation hooks as applicable).
• Deliver security collateral as part of SDK releases: integration, validation, and developer‑facing documentation (bring‑up/debug notes, known issues, and release readiness).
• Pre‑ & post‑silicon validation (AVV): create tests, validate on FPGA/first silicon, and root‑cause issues across HW/FW/kernel (boot, crypto, isolation, and lifecycle).

Required Qualifications

• B.E./B.Tech or M.E./M.Tech in Computer Engineering, Electrical/Electronics Engineering, or a related field.
• Strong experience (typically 5+ years) in low‑level firmware/boot software, secure boot, and Root of Trust development on SoCs.
• Expert‑level C programming; comfortable reading low‑level firmware and kernel‑adjacent code.
• Strong Linux internals knowledge: boot flow, memory management/MMU basics, privilege/isolation concepts, and system‑level debugging.
• Hands‑on SoC/platform bring‑up experience and ownership mindset for security and boot‑stack quality.
• Hands‑on with U‑Boot, Linux kernel, Device Tree, and Yocto/OpenEmbedded (or equivalent build systems).
• Strong debugging skills with GDB and at least one of OpenOCD/JTAG, Lauterbach, or similar tools.
• Experience working on FPGA, emulation, or early‑silicon platforms for bring‑up/validation.
• Good to Have RISC‑V (RV64) security experience or strong exposure to other application‑class CPU security architectures (ARM TrustZone/EL3, etc.).
• Background in pre‑silicon/FPGA validation or post‑silicon debug and triage for boot/security issues.
• Familiarity with platform security building blocks: secure boot, lifecycle/provisioning, secure storage, anti‑rollback, attestation, and firmware/OS boundaries.
• Experience with OpenSBI, secure monitor/firmware layers, and early‑boot isolation (PMP/sPMP/IOPMP or equivalents).
• Exposure to CI/CD and automated validation (test frameworks, dashboards, regressions) for boot/security quality.

What We Offer

Build a secure boot and Root of Trust stack from the ground up and see it shipped in real products.

End‑to‑end ownership across pre‑silicon → FPGA → first silicon → production SDK releases.

Work closely with architects and SoC teams; your validation data drives security decisions.

Deep technical work, strong peer group, and long‑term growth on a strategic platform.

GlobalFoundries is an equal opportunity employer, cultivating a diverse and inclusive workforce.

We believe having a multicultural workplace enhances productivity, efficiency and innovation whilst our employees feel truly respected, valued and heard.

As an affirmative employer, all qualified applicants are considered for employment regardless of age, ethnicity, marital status, citizenship, race, religion, political affiliation, gender, sexual orientation and medical and/or physical abilities.

All offers of employment with GlobalFoundries are conditioned upon the successful completion of background checks, medical screenings as applicable and subject to the respective local laws and regulations.

Information about our benefits you can find here: https://gf.com/about-us/careers/opportunities-asia

We shape what's essential

At GlobalFoundries you will find a vibrant work environment where collaboration and innovation thrive.

Our diverse and global team shares a culture of respect and inclusivity, representing the best in the industry.

We celebrate success together and are united by our dedication to excellence and our desire to improve and empower the world.