Senior Linux Security Engineer - Trusted Appliance Platforms

Total Integrated Resources Pte Ltd; Taguig; Hybrid; PHP 1,800,000 - 2,400,000; Full time

Job summary

Total Integrated Resources Pte Ltd is seeking a Senior Security Architect to own the security architecture of appliance platforms, including trusted boot, disk encryption, and hardware-backed key management. You will strengthen OS hardening, build pipelines, and attestation mechanisms while supporting media streaming stack integration.

Ideal candidates bring 5+ years in security-focused Linux environments, extensive cryptography experience, and hands-on TPM 2.0 and UEFI Secure Boot exposure.

Qualifications

• 5+ years in security-focused systems engineering on Linux.
• UEFI Secure Boot: key hierarchy, image signing; TPM 2.0 concepts.
• Disk encryption in production: LUKS2, cryptsetup, TPM binding.
• Linux hardening: AppArmor/SELinux, kernel lockdown, IMA/EVM, audit frameworks.
• Applied cryptography: signatures, AES-GCM, verification chains.
• Threat modeling and secure design review experience.

Responsibilities

• Design and maintain appliance trust architecture and signing workflows.
• Work with TPM 2.0 in production: PCR policies, sealing, attestation.
• Harden the Linux platform end to end: lockdown, IMA, AppArmor, auditd.
• Own the secure build pipeline: signed OS image assembly and reproducibility.
• Implement cryptography workflows: RSA-PSS, OAEP, AES-GCM.
• Build verification infra: QEMU/OVMF/tests and failure-safe gates.
• Contribute to threat modeling and architectural invariants.
• Develop and debug media streaming stack as product needs.
• Write operator-grade tooling (bash, Python, C) and runbooks.

Skills

Security architecture

Linux security

Threat modeling

Cryptography basics

Scripting: Bash/Python

Tools

QEMU

OVMF

swTPM

GStreamer

FFmpeg

Job description

Total Integrated Resources Pte Ltd is seeking a Senior Security Architect to own the security architecture of appliance platforms, including trusted boot, disk encryption, and hardware-backed key management. You will strengthen OS hardening, build pipelines, and attestation mechanisms while supporting media streaming stack integration.

Ideal candidates bring 5+ years in security-focused Linux environments, extensive cryptography experience, and hands-on TPM 2.0 and UEFI Secure Boot exposure.