Embedded Systems Security Engineer - Secure Boot & TEE

Dorle Controls; Foster (OK); On-site; USD 120,000 - 160,000; Full time

Job summary

Dorle Controls is seeking an Embedded Systems Security Engineer to harden our next-generation embedded Linux platform, bridging hardware security, kernel hardening, and secure user-space containment. You will design cryptographic defenses and automate security pipelines in CI/CD for secure OTA updates.

You will collaborate with manufacturing to provision devices securely at scale and lead DevSecOps practices, including secure boot, TEE integration, and sandboxing.

Qualifications

• Bachelor's degree or equivalent practical experience in a technical field
• 6+ years in Embedded Linux development, board bring-up, BSP customization
• 3+ years deploying device-level security features in production hardware
• Deep knowledge of bootloaders (U-Boot, Barebox) and Linux kernel storage/security subsystems
• Strong understanding of ARM TrustZone and modern processor security architectures
• Experience with Linux containment tools (SELinux/AppArmor, cgroups, namespaces, seccomp)
• Proficiency in C and scripting (Python/Bash)

Responsibilities

• Design and implement Hardware Root of Trust and Secure Boot across bootloaders to Linux kernel
• Implement dm-verity for verified read-only root filesystems and data encryption at rest
• Develop and maintain a TEE (e.g., OP-TEE) and Secure/Trusted Applications
• Enforce sandboxing and containment in user space (SELinux, AppArmor, namespaces, cgroups, seccomp)
• Build automated cryptographic signing pipelines in CI/CD (GitLab CI, GitHub Actions)
• Collaborate with manufacturing to burn hardware configuration fuses securely and validate security features pre-shipment
• Design multi-slot boot recovery layouts (A/B) for OTA resilience

Skills

Embedded Linux

Board bring-up

BSP customization

C programming

Python scripting

Shell scripting

Security design

OTA updates security

Education

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering

Tools

U-Boot

Barebox

dm-crypt

dm-verity

SELinux

AppArmor

cgroups

namespaces

seccomp

Yocto Project

Buildroot

Job description

Dorle Controls is seeking an Embedded Systems Security Engineer to harden our next-generation embedded Linux platform, bridging hardware security, kernel hardening, and secure user-space containment. You will design cryptographic defenses and automate security pipelines in CI/CD for secure OTA updates.

You will collaborate with manufacturing to provision devices securely at scale and lead DevSecOps practices, including secure boot, TEE integration, and sandboxing.