Edge Software & Security Engineer

Bloom Energy; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Bloom Energy in Bengaluru seeks a senior Edge Platform Security Engineer to design and build software foundations for secure, scalable edge platforms. The role combines edge software skills, platform development, and secure-by-design strategies to ensure devices are deployed, updated, managed, and trusted through their lifecycle.

You will design and implement resilient OTA update systems, device lifecycle management, and secure software supply chains.

Qualifications

• 10+ years of experience in edge, embedded, platform, or security engineering.
• Strong software development experience in Python, Go, C/C++, or Rust.
• Hands-on experience with secure boot, TPMs, secure elements, and hardware-rooted trust.

Responsibilities

• Design and develop edge platform services, frameworks, and tooling for embedded and edge environments.
• Build secure-by-design platform capabilities including secure boot, cryptographic services, trusted storage, and device identity.
• Design and implement resilient OTA update systems for firmware, OS, and edge applications.
• Develop device lifecycle management capabilities including provisioning, onboarding, configuration management, and retirement.
• Implement supply chain security controls including firmware signing, SBOM generation, artifact provenance, and build integrity.
• Build and secure CI/CD pipelines, developer workflows, and software delivery toolchains for edge platforms.
• Integrate TPMs, TEEs, and secure elements to establish hardware-rooted trust.
• Implement device attestation, integrity validation, and remote trust verification mechanisms.
• Develop automation, observability, diagnostics, and fleet management capabilities for large-scale edge deployments.
• Partner with hardware, firmware, cloud, and product teams to define platform architecture, security requirements, and threat models

Skills

Python

Go

C/C++

Rust

Tools

Containerized apps

Embedded Linux

Kubernetes

K3s

Talos Edge

KubeEdge

Job description

Role Summary

Design and build the software foundations that power secure, scalable edge platforms. This role combines edge software skills, platform development, and secure by design strategies to ensure devices can be deployed, updated, managed, and trusted throughout their lifecycle.

Key Responsibilities

• Design and develop edge platform services, frameworks, and tooling for embedded and edge environments
• Build secure-by-design platform capabilities including secure boot, cryptographic services, trusted storage, and device identity
• Design and implement resilient OTA update systems for firmware, operating systems, and edge applications
• Develop device lifecycle management capabilities including provisioning, onboarding, configuration management, and retirement
• Implement supply chain security controls including firmware signing, SBOM generation, artifact provenance, and build integrity
• Build and secure CI/CD pipelines, developer workflows, and software delivery toolchains for edge platforms
• Integrate TPMs, TEEs, and secure elements to establish hardware-rooted trust
• Implement device attestation, integrity validation, and remote trust verification mechanisms
• Develop automation, observability, diagnostics, and fleet management capabilities for large-scale edge deployments
• Partner with hardware, firmware, cloud, and product teams to define platform architecture, security requirements, and threat models

Requirements

• 10+ years of experience in edge, embedded, platform, or security engineering
• Strong software development experience in Python, Go, C/C++, or Rust
• Experience building software for optimized containerized apps, embedded Linux, or edge computing environments
• Hands-on experience with secure boot, TPMs, secure elements, key management, and hardware-rooted trust
• Knowledge of OTA update architectures, software packaging, and fleet deployment strategies
• Experience implementing secure software supply chains, code signing, SBOMs, and artifact provenance
• Familiarity with containerized edge workloads and orchestration technologies
• Understanding of device identity, attestation, lifecycle management, and zero-trust principles
• Familiarity with operating CI/CD pipelines and modern SDLC practices
• Proficiency with Git and familiarity with Jira, Confluence, and collaborative engineering workflows

Preferred Qualifications

• Experience with Kubernetes, K3s, Talos Edge, KubeEdge or similar edge orchestration platforms
• Experience developing platform SDKs, APIs, and developer tooling
• Familiarity with confidential computing, trusted execution environments, or remote attestation services
• Exposure to managing large-scale fleets of connected devices
• Knowledge of cloud-to-edge architectures and hybrid deployment models