Lead Platform Security Architect

Cisco Systems, Inc; Milpitas (CA); On-site; USD 166,000 - 274,000; Full time

Job summary

Cisco Systems, Inc. is seeking a Technical Leader to own platform security across hardware, firmware, and OS layers. You will drive architecture and integration of robust security solutions from manufacturing to production deployment, leading teams across hardware, firmware, and software domains.

The role focuses on Root of Trust, Secure Boot, attestation, and secure firmware processes within SONiC and related ecosystems, with emphasis on end-to-end security across the stack.

Qualifications

• Bachelor's degree with 8 years related experience or higher degrees with related experience.
• At least 5 years in C/C++ and Python/shell with cross-layer debugging.
• 8 years in platform, firmware, or system security.
• 5 years in UEFI Secure Boot, Linux boot/kernel architectures, and TPM-based trust.
• 8 years of Linux system expertise across boot, kernels, drivers, and firmware interfaces in SONiC or similar OS.

Responsibilities

• Define platform security strategies including Root of Trust and Secure/Measured Boot.
• Lead UEFI Secure Boot enrollment, rotation, revocation, and debugging processes.
• Integrate security into Linux and SONiC environments including ONIE and firmware updates.
• Manage provisioning of keys and certificates for platform identity across lifecycle.
• Mentor engineering teams across hardware, firmware, and software domains.

Skills

C/C++

Python/shell

Linux

Security

Firmware

Education

Bachelor's degree

Master's degree

PhD

Tools

UEFI Secure Boot

Linux kernel

TPM/Hardware Root of Trust

OpenBMC

Job description

Cisco Systems, Inc. is seeking a Technical Leader to own platform security across hardware, firmware, and OS layers. You will drive architecture and integration of robust security solutions from manufacturing to production deployment, leading teams across hardware, firmware, and software domains.

The role focuses on Root of Trust, Secure Boot, attestation, and secure firmware processes within SONiC and related ecosystems, with emphasis on end-to-end security across the stack.