Embedded Security Engineer: Hardware Root of Trust

ALTEN Technology USA; Foster City (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

ALTEN Technology USA is seeking an Embedded Systems Security Engineer to advance security for a next-generation embedded Linux platform. You’ll bridge hardware security, kernel hardening, and secure user-space containment, while automating CI/CD signing and collaborating with manufacturing to securely provision devices at scale.

Responsibilities include hardware root of trust design, secure boot, DM‑verity, TA development, and sandboxing with SELinux/AppArmor.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline (or equivalent practical experience).
• 6+ years of professional Embedded Linux development experience, board bring-up, and BSP customization.
• 3+ years of hands-on experience deploying device-level security features into production hardware.
• Expert knowledge of bootloader configurations (U-Boot/Barebox) and Linux kernel storage/security subsystems (dm-crypt, dm-verity).
• Deep understanding ARM TrustZone (ARMv7-A/ARMv8-A, EL1-EL3).
• Experience with SELinux/AppArmor policies and Linux containment tools (cgroups, namespaces).
• Proficiency with Yocto Project or Buildroot for embedded Linux builds.
• Advanced C programming and scripting in Python or Bash.

Responsibilities

• Platform Hardening & Architecture: Design and implement Hardware Root of Trust and Secure Boot from bootloader through Linux kernel.
• Storage & Integrity Management: Implement dm-verity for verified read-only roots and secure data encryption at rest.
• Trusted Execution Environments: Develop and maintain a TEE (e.g., OP-TEE) and Secure/Trusted Applications.
• Application Sandboxing: Enforce isolation using SELinux, AppArmor, cgroups, namespaces, and seccomp.
• DevSecOps Automation: Create automated cryptographic signing pipelines in CI/CD to sign bootloaders/kernels/OTA payloads.
• Production Provisioning Support: Write scripts/tools for secure fuse-burns and EOL test software.
• System Resilience: Architect multi-slot boot recovery layouts (A/B) to ensure safe OTA updates.

Job description

ALTEN Technology USA is seeking an Embedded Systems Security Engineer to advance security for a next-generation embedded Linux platform. You’ll bridge hardware security, kernel hardening, and secure user-space containment, while automating CI/CD signing and collaborating with manufacturing to securely provision devices at scale.

Responsibilities include hardware root of trust design, secure boot, DM‑verity, TA development, and sandboxing with SELinux/AppArmor.