Senior Technical Architect

HCL Technologies Limited; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

HCL Technologies Limited seeks a Lead — Security Software to own the secure boot chain and HRoT for a TrustZone-based platform. You will mentor a Senior Engineer and collaborate across firmware, kernel, and security teams in Hyderabad during the transition phase.

The role demands 8–10 years of embedded security experience, expertise in cryptography, and hands-on work with secure hardware and system software.

Qualifications

• 8–10 years embedded platform security engineering.
• Secure boot / chain-of-trust implementation.
• TrustZone architecture and isolation enforcement.
• Applied cryptography — AES, TRNG, key management, HRoT/fusing.
• Security debugging across firmware and kernel layers.
• GlobalPlatform TEE APIs / OP-TEE Trusted Application development (nice-to-have).
• Security certification exposure (FIPS 140-3, PSA Certified, SESIP or similar) (nice-to-have).

Responsibilities

• Own the secure boot chain and TrustZone-based platform security sustenance — chain of trust, image signing, and verified boot.
• Maintain the Hardware Root of Trust (HRoT), including key provisioning, fusing, and certificate/lifecycle management.
• Sustain cryptographic subsystems — AES engines, TRNG (True Random Number Generator), and related crypto acceleration.
• Triage and resolve security-relevant defects — secure boot failures, TrustZone isolation issues, crypto/TRNG faults — across firmware and kernel layers.
• Support security certification/assessment activities and vulnerability triage.
• Own the security regression suite and mentor the pod's Senior Engineer.

Skills

Embedded security

TrustZone/TEE

Secure boot

Cryptography

Crypto acceleration

Kernel security

Job description

Pod 3 — SSG — Lead
Pod / Track Pod 3 — SSG
Role Title Lead — Security Software (TrustZone, Secure Boot & Crypto)
Experience 8 – 10 years
Primary Location Hyderabad, India (Transition phase); HCLTech Offshore Delivery Center thereafter
Work Model Physical co-location at Hyderabad mandatory during Transition (Month 1–3) for knowledge transfer and hardware/lab access; delivery shifts to HCLTech's Offshore Delivery Center (ODC) from Shadow (Month 4–6) onward.
Role Summary

Key Responsibilities

• Own the secure boot chain and TrustZone-based platform security sustenance — chain of trust, image signing, and verified boot.
• Maintain the Hardware Root of Trust (HRoT), including key provisioning, fusing, and certificate/lifecycle management.
• Sustain cryptographic subsystems — AES engines, TRNG (True Random Number Generator), and related crypto acceleration.
• Triage and resolve security-relevant defects — secure boot failures, TrustZone isolation issues, crypto/TRNG faults — across firmware and kernel layers.
• Support security certification/assessment activities and vulnerability triage.
• Own the security regression suite and mentor the pod's Senior Engineer.

Must-Have Skills

• 8–10 years embedded platform security engineering (secure boot, TrustZone/TEE, cryptography).
• Secure boot / verified boot chain-of-trust implementation.
• TrustZone architecture and isolation enforcement.
• Applied cryptography — AES, TRNG, key management, HRoT/fusing.
• Security debugging across firmware and kernel layers.

Good-to-Have Skills

• GlobalPlatform TEE APIs / OP-TEE Trusted Application development.
• Security certification exposure (FIPS 140-3, PSA Certified, SESIP or similar).
• Fuzzing, static analysis and secure SDLC tooling.
• HSM-backed manufacturing signing infrastructure experience.

Pod 3 — SSG — Lead
Pod / Track Pod 3 — SSG
Role Title Lead — Security Software (TrustZone, Secure Boot & Crypto)
Experience 8 – 10 years
Primary Location Hyderabad, India (Transition phase); HCLTech Offshore Delivery Center thereafter
Work Model Physical co-location at Hyderabad mandatory during Transition (Month 1–3) for knowledge transfer and hardware/lab access; delivery shifts to HCLTech's Offshore Delivery Center (ODC) from Shadow (Month 4–6) onward.
Role Summary
Own the System Software Group (SSG) layer sustenance — HAL abstraction and system services that bridge the kernel and application layers.

Key Responsibilities

Key Responsibilities
Own the secure boot chain and TrustZone-based platform security sustenance — chain of trust, image signing, and verified boot.
Maintain the Hardware Root of Trust (HRoT), including key provisioning, fusing, and certificate/lifecycle management.
Sustain cryptographic subsystems — AES engines, TRNG (True Random Number Generator), and related crypto acceleration.
Triage and resolve security-relevant defects — secure boot failures, TrustZone isolation issues, crypto/TRNG faults — across firmware and kernel layers.
Support security certification/assessment activities and vulnerability triage.
Own the security regression suite and mentor the pod's Senior Engineer.
Must-Have Skills
8–10 years embedded platform security engineering (secure boot, TrustZone/TEE, cryptography).
Secure boot / verified boot chain-of-trust implementation.
TrustZone architecture and isolation enforcement.
Applied cryptography — AES, TRNG, key management, HRoT/fusing.
Security debugging across firmware and kernel layers.
Good-to-Have Skills
GlobalPlatform TEE APIs / OP-TEE Trusted Application development.
Security certification exposure (FIPS 140-3, PSA Certified, SESIP or similar).
Fuzzing, static analysis and secure SDLC tooling.
HSM-backed manufacturing signing infrastructure experience.

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.