Lead Secure Boot Architect for ARM Server Firmware

Ampere Computing LLC; Portland, Northern (OR, KY); Hybrid; USD 226,000 - 339,000; Full time

Benefits offered by this job

Premium medical insurance

401K retirement plan

Unlimited Flextime

Job summary

Ampere Computing LLC is seeking a Sr. Principal System Firmware Authentication Engineer to lead authentication architecture and secure boot across ARM-based server platforms.

You will drive the development, validation, and deployment of robust firmware authentication, cryptographic services, and device attestation throughout the product lifecycle. The role requires deep experience in 32/64-bit ARM systems, secure boot, cryptography, and platform security, with strong leadership and collaboration

Qualifications

• Requires a Bachelor’s or Master’s in a relevant technical field or equivalent practical experience.
• 12+ years of firmware, embedded software, or platform security experience.
• Deep expertise in 32-bit/64-bit ARM server platforms, secure boot and device identity.

Responsibilities

• Lead architecture, development, and validation of secure system firmware for ARM-based server platforms.
• Define and execute unit, integration, functional, and security testing strategies.
• Collaborate across firmware, hardware, validation, security, ODM, and customer teams throughout the product lifecycle.
• Drive secure firmware updates, attestation, and trusted platform capabilities across multi-product programs.
• Provide technical direction on firmware authentication architecture and secure development practices.

Skills

C/C++

ARM architecture

cryptography

firmware bring-up

debugging

Education

Bachelor’s or Master’s degree in Computer Engineering/CE/CS

Tools

OpenSSL

mbedTLS

Job description

Ampere Computing LLC is seeking a Sr. Principal System Firmware Authentication Engineer to lead authentication architecture and secure boot across ARM-based server platforms.

You will drive the development, validation, and deployment of robust firmware authentication, cryptographic services, and device attestation throughout the product lifecycle. The role requires deep experience in 32/64-bit ARM systems, secure boot, cryptography, and platform security, with strong leadership and collaboration