Embedded Linux Security Architect: Secure Boot & TEE

BairesDev; Veracruz; Presencial; MXN 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Excellent USD or local currency pay

Home setup provided

Flexible hours

Parental leaves and holidays

Global talent environment

Mentorship and growth opportunities

Descripción de la vacante

BairesDev is seeking an Embedded Linux Security Engineer to advance Secure Boot architecture from a hardware root of trust to the kernel, with a focus on embedded Linux security.

You will harden storage with dm-verity/dm-crypt, stand up a Trusted Execution Environment, enable OS-level sandboxing, and automate signing pipelines in CI/CD. This is a 100% remote role with compensation in USD or local currencies.

Formación

• 5+ years of experience in embedded Linux engineering with a security focus.
• Strong expertise in embedded Linux security, including dm-verity, dm-crypt, and ARM TrustZone EL1-EL3.
• Proven experience designing hardware root of trust and Secure Boot from scratch, including U-Boot Verified Boot from bootloader through kernel.
• Experience with embedded Linux board bring-up and BSP customization using Yocto.
• Background with TEE development and trusted application authoring using OP-TEE.
• Strong C skills with Python or Bash scripting.
• Advanced proficiency in English.

Responsabilidades

• Build Secure Boot architecture on embedded Linux, from hardware root of trust through the kernel.
• Harden the Linux storage stack using dm-verity and dm-crypt.
• Stand up a Trusted Execution Environment and author trusted applications within the Linux security model.
• Enforce Linux-level user-space sandboxing and access control.
• Automate cryptographic signing pipelines in CI/CD against a signing backend.

Conocimientos

Embedded Linux

Security engineering

C programming

Python scripting

English proficiency

Yocto

Herramientas

U-Boot

TrustZone

OP-TEE

dm-verity

dm-crypt

Descripción del empleo

BairesDev is seeking an Embedded Linux Security Engineer to advance Secure Boot architecture from a hardware root of trust to the kernel, with a focus on embedded Linux security.

You will harden storage with dm-verity/dm-crypt, stand up a Trusted Execution Environment, enable OS-level sandboxing, and automate signing pipelines in CI/CD. This is a 100% remote role with compensation in USD or local currencies.