Embedded Security Engineer - Remote Work | REF#302386

BairesDev; Veracruz; Remote; MXN 1.099.000 - 1.649.000; Vollzeit

Benefits dieser Stelle

Remote work

USD compensation

Home office setup

Flexible hours

Parental leave

Mentorship & growth

Zusammenfassung

BairesDev is seeking an Embedded Security Engineer to design and implement Secure Boot, root of trust, and trusted applications for embedded Linux systems. The role emphasizes dm-verity, dm-crypt, and ARM TrustZone, with hands-on work on U-Boot, Yocto, and OP-TEE, while enabling automation and strong C/Python or Bash skills.

The position offers 100% remote work, competitive USD compensation, flexible hours, and a multicultural environment with growth opportunities through mentorship and projects.

Qualifikationen

• 5+ years of embedded systems security experience.
• Expertise in embedded Linux security: dm-verity, dm-crypt, ARM TrustZone EL1-EL3.
• Experience designing hardware root of trust and Secure Boot from scratch, including U-Boot Verified Boot.
• Experience with embedded Linux board bring-up and BSP customization using Yocto.
• Background with TEE development and trusted application authoring using OP-TEE.
• Strong C skills with Python or Bash scripting.
• Advanced proficiency in English.

Aufgaben

• Architect and implement Secure Boot from bootloader through kernel, building a hardware root of trust from scratch.
• Harden storage using dm-verity and dm-crypt.
• Stand up a Trusted Execution Environment and author trusted applications.
• Enforce user-space sandboxing and access control mechanisms.
• Automate cryptographic signing pipelines in CI/CD against a signing backend.

Kenntnisse

C programming

Python scripting

Bash scripting

Tools

dm-verity

dm-crypt

ARM TrustZone

U-Boot Verified Boot

Yocto

OP-TEE

Jobbeschreibung

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Embedded Security Engineer at BairesDev

What You'll Do

• Architect and implement Secure Boot from bootloader through kernel, building a hardware root of trust from scratch.
• Harden storage using dm-verity and dm-crypt.
• Stand up a Trusted Execution Environment and author trusted applications.
• Enforce user-space sandboxing and access control mechanisms.
• Automate cryptographic signing pipelines in CI/CD against a signing backend.

What We Are Looking For

• 5+ years of experience in embedded systems engineering with a security focus.
• Strong expertise in embedded Linux security, including dm-verity, dm-crypt, and ARM TrustZone EL1-EL3.
• Proven experience designing hardware root of trust and Secure Boot from scratch, including U-Boot Verified Boot from bootloader through kernel.
• Experience with embedded Linux board bring-up and BSP customization using Yocto.
• Background with TEE development and trusted application authoring using OP-TEE.
• Strong C skills with Python or Bash scripting.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!