Edge Software & Security Engineer

Bloom Energy; Town of Italy (NY); On-site; USD 160,000 - 230,000; Full time

Job summary

Bloom Energy is seeking an experienced Senior Edge Platform Engineer to design and build software foundations powering secure, scalable edge platforms. You will blend edge software, platform development, and secure-by-design strategies to ensure devices can be deployed, updated, managed, and trusted through their lifecycle.

You will design edge services, implement secure boot, OTA updates, device identity, and fleet observability while collaborating with hardware, firmware, cloud, and product

Qualifications

• 10+ years in edge, embedded, platform, or security engineering.
• Strong Python/Go/C/C++/Rust development skills.
• Experience with optimized containerized apps, embedded Linux, or edge environments.
• Hands-on with secure boot, TPMs, secure elements, key management, and hardware-rooted trust.
• Knowledge of OTA update architectures, software packaging, and fleet deployment strategies.
• Experience implementing secure software supply chains, code signing, SBOMs, and artifact provenance.
• Familiarity with containerized edge workloads and orchestration.
• Understanding of device identity, attestation, lifecycle management, and zero-trust principles.
• Familiarity with CI/CD pipelines and modern SDLC practices.
• Proficiency with Git and Jira/Confluence workflows.

Responsibilities

• Design and develop edge platform services, frameworks, and tooling for embedded and edge environments.
• Build secure-by-design platform capabilities including secure boot, cryptographic services, trusted storage, and device identity.
• Design and implement resilient OTA update systems for firmware, OS, and edge apps.
• Develop device lifecycle management including provisioning, onboarding, configuration, and retirement.
• Implement supply chain security controls including firmware signing, SBOM generation, artifact provenance, and build integrity.
• Build and secure CI/CD pipelines, developer workflows, and software delivery toolchains for edge platforms.
• Integrate TPMs, TEEs, and secure elements to establish hardware-rooted trust.
• Implement device attestation, integrity validation, and remote trust verification mechanisms.
• Develop automation, observability, diagnostics, and fleet management for large-scale edge deployments.
• Partner with hardware, firmware, cloud, and product teams to define platform architecture, security requirements, and threat models.

Skills

Edge software

Python

Go

C/C++

Rust

Secure boot

TPMs

OTA updates

Lifecycle mgmt

SBOMs

CI/CD

Git/Jira/Confluence

Tools

Jira

Confluence

Git

Kubernetes

Job description

Role Summary

Design and build the software foundations that power secure, scalable edge platforms. This role combines edge software skills, platform development, and secure by design strategies to ensure devices can be deployed, updated, managed, and trusted throughout their lifecycle.

Key Responsibilities

• Design and develop edge platform services, frameworks, and tooling for embedded and edge environments
• Build secure-by-design platform capabilities including secure boot, cryptographic services, trusted storage, and device identity
• Design and implement resilient OTA update systems for firmware, operating systems, and edge applications
• Develop device lifecycle management capabilities including provisioning, onboarding, configuration management, and retirement
• Implement supply chain security controls including firmware signing, SBOM generation, artifact provenance, and build integrity
• Build and secure CI/CD pipelines, developer workflows, and software delivery toolchains for edge platforms
• Integrate TPMs, TEEs, and secure elements to establish hardware-rooted trust
• Implement device attestation, integrity validation, and remote trust verification mechanisms
• Develop automation, observability, diagnostics, and fleet management capabilities for large-scale edge deployments
• Partner with hardware, firmware, cloud, and product teams to define platform architecture, security requirements, and threat models

Requirements

• 10+ years of experience in edge, embedded, platform, or security engineering
• Strong software development experience in Python, Go, C/C++, or Rust
• Experience building software for optimized containerized apps, embedded Linux, or edge computing environments
• Hands-on experience with secure boot, TPMs, secure elements, key management, and hardware-rooted trust
• Knowledge of OTA update architectures, software packaging, and fleet deployment strategies
• Experience implementing secure software supply chains, code signing, SBOMs, and artifact provenance
• Familiarity with containerized edge workloads and orchestration technologies
• Understanding of device identity, attestation, lifecycle management, and zero-trust principles
• Familiarity with operating CI/CD pipelines and modern SDLC practices
• Proficiency with Git and familiarity with Jira, Confluence, and collaborative engineering workflows

Preferred Qualifications

• Experience with Kubernetes, K3s, Talos Edge, KubeEdge or similar edge orchestration platforms
• Experience developing platform SDKs, APIs, and developer tooling
• Familiarity with confidential computing, trusted execution environments, or remote attestation services
• Exposure to managing large-scale fleets of connected devices
• Knowledge of cloud-to-edge architectures and hybrid deployment models