Remote Embedded Security Engineer | Flexible Hours

BairesDev; Veracruz; Remote; MXN 1,099,000 - 1,649,000; Full time

Benefits offered by this job

Remote work

USD compensation

Home office setup

Flexible hours

Parental leave

Mentorship & growth

Job summary

BairesDev is seeking an Embedded Security Engineer to design and implement Secure Boot, root of trust, and trusted applications for embedded Linux systems. The role emphasizes dm-verity, dm-crypt, and ARM TrustZone, with hands-on work on U-Boot, Yocto, and OP-TEE, while enabling automation and strong C/Python or Bash skills.

The position offers 100% remote work, competitive USD compensation, flexible hours, and a multicultural environment with growth opportunities through mentorship and projects.

Qualifications

• 5+ years of embedded systems security experience.
• Expertise in embedded Linux security: dm-verity, dm-crypt, ARM TrustZone EL1-EL3.
• Experience designing hardware root of trust and Secure Boot from scratch, including U-Boot Verified Boot.
• Experience with embedded Linux board bring-up and BSP customization using Yocto.
• Background with TEE development and trusted application authoring using OP-TEE.
• Strong C skills with Python or Bash scripting.
• Advanced proficiency in English.

Responsibilities

• Architect and implement Secure Boot from bootloader through kernel, building a hardware root of trust from scratch.
• Harden storage using dm-verity and dm-crypt.
• Stand up a Trusted Execution Environment and author trusted applications.
• Enforce user-space sandboxing and access control mechanisms.
• Automate cryptographic signing pipelines in CI/CD against a signing backend.

Skills

C programming

Python scripting

Bash scripting

Tools

dm-verity

dm-crypt

ARM TrustZone

U-Boot Verified Boot

Yocto

OP-TEE

Job description

BairesDev is seeking an Embedded Security Engineer to design and implement Secure Boot, root of trust, and trusted applications for embedded Linux systems. The role emphasizes dm-verity, dm-crypt, and ARM TrustZone, with hands-on work on U-Boot, Yocto, and OP-TEE, while enabling automation and strong C/Python or Bash skills.

The position offers 100% remote work, competitive USD compensation, flexible hours, and a multicultural environment with growth opportunities through mentorship and projects.