Embedded Linux Security Engineer: Hardware Root of Trust

Altentechnologyusa; Foster City (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Mentorship

Career growth opportunities

On-site work

Job summary

ALTEN Technology USA in Foster City, CA is seeking an Embedded Linux Security Engineer to harden our next-generation embedded platform. You will bridge hardware security, kernel hardening, and secure user-space containment to protect critical systems.

You’ll design hardware root of trust, secure boot, dm-verity, TEE integration, and automated signing pipelines in CI/CD, collaborating with manufacturing to ensure secure production and reliable OTA updates.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline (or equivalent practical experience).
• 6+ years of Embedded Linux development, board bring-up, and BSP customization.
• 3+ years of device security features deployment in production hardware.
• Expertise with bootloaders (U-Boot, Barebox) and kernel storage/security subsystems (dm-crypt, dm-verity).
• Deep understanding of ARM TrustZone (ARMv7-A/ARMv8-A).
• Experience with SELinux/AppArmor policies and Linux containment tools.
• Proficiency with Yocto Project or Buildroot for embedded builds.
• Strong C programming and Python/Bash scripting.

Responsibilities

• Design and implement the Hardware Root of Trust and Secure Boot from bootloader to kernel.
• Implement dm-verity and encryption for secure root filesystem.
• Develop, integrate, and maintain a TEE (OP-TEE) and Secure/Trusted Apps.
• Enforce sandboxing with SELinux/AppArmor, cgroups, namespaces, and seccomp.

Skills

Embedded Linux

Board bring-up

BSP customization

Security features

Bootloader config

Linux kernel

ARM TrustZone

SELinux/AppArmor

Yocto / Buildroot

C programming

Python / Bash

Education

Bachelor’s degree in CS/EE

Job description

ALTEN Technology USA in Foster City, CA is seeking an Embedded Linux Security Engineer to harden our next-generation embedded platform. You will bridge hardware security, kernel hardening, and secure user-space containment to protect critical systems.

You’ll design hardware root of trust, secure boot, dm-verity, TEE integration, and automated signing pipelines in CI/CD, collaborating with manufacturing to ensure secure production and reliable OTA updates.