Remote Embedded Linux Security Engineer - Secure Boot

BairesDev; Veracruz; A distancia; MXN 2.063.000 - 3.095.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

USD or local currency compensation

Home hardware & software setup

Descripción de la vacante

BairesDev is hiring a skilled Embedded Linux Security Engineer to join a 100% remote team. You will design and implement Secure Boot, hardware root of trust, and kernel-level protections for embedded Linux systems.

Expect to harden storage with dm-verity/dm-crypt, establish a trusted execution environment, and automate signing pipelines within CI/CD. Ideal candidates have 5+ years in embedded Linux security, experience with Yocto, OP-TEE, and ARM TrustZone, plus strong C and scripting skills and

Formación

• 5+ years of embedded Linux engineering with a security focus.
• Proven experience with dm-verity, dm-crypt, and ARM TrustZone.
• Design hardware root of trust and Secure Boot from scratch.
• Yocto BSP bring-up and board initialization.

Responsabilidades

• Build Secure Boot architecture on embedded Linux, from hardware root of trust through the kernel.
• Harden the Linux storage stack using dm-verity and dm-crypt.
• Stand up a Trusted Execution Environment and trusted applications.
• Enforce Linux-level user-space sandboxing and access control.
• Automate cryptographic signing pipelines in CI/CD against a signing backend.

Conocimientos

Embedded Linux

Secure Boot

Yocto BSP

C/Python scripting

English proficiency

Herramientas

dm-verity

dm-crypt

ARM TrustZone

OP-TEE

U-Boot

Descripción del empleo

BairesDev is hiring a skilled Embedded Linux Security Engineer to join a 100% remote team. You will design and implement Secure Boot, hardware root of trust, and kernel-level protections for embedded Linux systems.

Expect to harden storage with dm-verity/dm-crypt, establish a trusted execution environment, and automate signing pipelines within CI/CD. Ideal candidates have 5+ years in embedded Linux security, experience with Yocto, OP-TEE, and ARM TrustZone, plus strong C and scripting skills and