Remote Embedded Security Engineer: Secure Boot & Trust

BairesDev; Veracruz; Presencial; MXN 2.042.000 - 2.552.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive USD compensation

Home office hardware & software setup

Flexible hours

Parental leave & holidays

Descripción de la vacante

BairesDev is seeking an Embedded Security Engineer to design and implement Secure Boot and a hardware root of trust across the boot chain, from bootloader to kernel. You will harden storage, stand up a trusted execution environment, and automate signing in CI/CD.

You will work on embedded Linux security with Yocto, U-Boot, ARM TrustZone, and OP-TEE, collaborating with a global remote team. The role offers 100% remote work, flexible hours, and compensation in USD.

Formación

• 5+ years of experience in embedded systems engineering with a security focus.
• Expertise in embedded Linux security (dm-verity, dm-crypt, ARM TrustZone).
• Proven experience designing hardware root of trust and Secure Boot from scratch, including U-Boot Verified Boot.
• Experience with Yocto, BSP bring-up, and trusted applications using OP-TEE.
• Strong C skills with Python or Bash scripting; advanced English.

Responsabilidades

• Architect and implement Secure Boot from bootloader through kernel, building a hardware root of trust.
• Harden storage using dm-verity and dm-crypt.
• Stand up a Trusted Execution Environment and author trusted applications.
• Enforce user-space sandboxing and access control mechanisms.
• Automate cryptographic signing pipelines in CI/CD against a signing backend.

Conocimientos

Security-focused embedded systems

C programming

Python or Bash scripting

English proficiency

Embedded Linux security

Herramientas

Yocto

U-Boot

ARM TrustZone

OP-TEE

dm-verity

dm-crypt

Descripción del empleo

BairesDev is seeking an Embedded Security Engineer to design and implement Secure Boot and a hardware root of trust across the boot chain, from bootloader to kernel. You will harden storage, stand up a trusted execution environment, and automate signing in CI/CD.

You will work on embedded Linux security with Yocto, U-Boot, ARM TrustZone, and OP-TEE, collaborating with a global remote team. The role offers 100% remote work, flexible hours, and compensation in USD.