Embedded Linux Security Engineer: Secure Boot & TEE

ALTEN Technology USA; Foster City (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

ALTEN Technology USA in Foster City, CA seeks an Embedded Linux Security Engineer to harden our next‑generation embedded platform. You will bridge hardware security, kernel hardening, and secure user‑space containment while collaborating with manufacturing teams to scale secure provisioning.

Responsibilities include designing the Hardware Root of Trust and Secure Boot, implementing dm‑verity and encryption, developing TEEs like OP‑TEE, enforcing SELinux/AppArmor, building DevSecOps pipelines,

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related technical discipline (or equivalent practical experience).
• 6+ years of Embedded Linux development, board bring-up, and BSP customization.
• 3+ years deploying device-level security features into production hardware.
• Expert knowledge of bootloaders (U-Boot, Barebox) and Linux kernel storage/security subsystems (dm-crypt, dm-verity).
• Deep understanding of ARM TrustZone (ARMv7-A/v8-A, EL1–EL3).
• Experience with SELinux/AppArmor, cgroups, namespaces, and seccomp.
• Yocto/Buildroot-based build automation; strong C and scripting (Python/Bash).

Responsibilities

• Platform Hardening & Architecture: Design Hardware Root of Trust and Secure Boot from bootloader through Linux kernel.
• Storage & Integrity Management: Implement dm-verity and encryption for read-only root filesystems.
• Trusted Execution Environments: Develop and integrate a TEE (OP-TEE) and Secure Applications.
• Application Sandboxing: Enforce isolation using SELinux, AppArmor, cgroups, namespaces, and seccomp.
• DevSecOps Automation: Build automated cryptographic signing pipelines in CI/CD for bootloaders and kernels.
• Production Provisioning Support: Write scripts for secure eFuses/OTP programming and end-of-line security testing.
• System Resilience: Design multi-slot boot recovery layouts to guarantee OTA failure resilience.

Skills

Embedded Linux development

Board bring-up

BSP customization

Security features deployment

Bootloader configurations

Linux containment tools

C programming

Python scripting

Education

Bachelor's degree in Computer Science/Engineering

Tools

U-Boot

Barebox

dm-verity

dm-crypt

OP-TEE

Yocto Project

Buildroot

Job description

ALTEN Technology USA in Foster City, CA seeks an Embedded Linux Security Engineer to harden our next‑generation embedded platform. You will bridge hardware security, kernel hardening, and secure user‑space containment while collaborating with manufacturing teams to scale secure provisioning.

Responsibilities include designing the Hardware Root of Trust and Secure Boot, implementing dm‑verity and encryption, developing TEEs like OP‑TEE, enforcing SELinux/AppArmor, building DevSecOps pipelines,