Lead System Firmware Security Architect (ARM Servers)

Ampere; Santa Clara (CA); On-site; USD 226,000 - 339,000; Full time

Benefits offered by this job

Health insurance

401K retirement plan

Unlimited flextime

Paid holidays

Job summary

Ampere Computing is seeking a Sr. Principal System Firmware Authentication Engineer to lead architecture, development, and validation of secure system firmware for ARM-based server platforms.

The role emphasizes firmware authentication, secure boot, cryptographic services, device attestation, and trusted platform capabilities across the product lifecycle. Collaborate with hardware, firmware, security, validation, ODM, and customer teams to deliver robust security features and scalable processes.

Qualifications

• Bachelor’s or master's degree in Computer Engineering, Electrical Engineering, Computer Science, or related field.
• 12+ years of firmware, embedded software, or platform security experience.
• Strong C/C++ for embedded or systems software.
• Experience with ARM server platforms and boot flows.
• Knowledge of secure boot, cryptography, and hardware roots of trust.
• Experience with X.509, certificate chains, signing workflows, and device identity.
• Hands-on with cryptographic libraries and security frameworks.

Responsibilities

• Lead architecture, development, and validation of secure system firmware for ARM server platforms.
• Drive secure boot, firmware authentication, and certificate management.
• Bring up firmware across virtual platforms, emulation systems, and silicon.
• Enable secure firmware updates and device attestation capabilities.
• Define and execute unit, integration, functional, and security testing strategies.
• Improve firmware interactions with BIOS/UEFI, Linux, and Windows.
• Identify risks via architecture reviews and pre-silicon validation.
• Debug cross-domain issues spanning firmware, software, and hardware.
• Guide ODMs, customers, and engineering teams on security requirements.
• Deliver reusable code and comprehensive documentation.

Skills

C/C++ programming

ARM architecture

Secure boot

Cryptography

Device attestation

OpenSSL/mbedTLS

Python scripting

Git/Jenkins/Jira

JTAG/TRACE32/OpenOCD

Firmware bring-up

Education

Bachelor’s or Master’s in Computer/Electrical Engineering or CS

Tools

OpenSSL

mbedTLS

TRACE32

OpenOCD

CMake

Device Tree

Job description

Ampere Computing is seeking a Sr. Principal System Firmware Authentication Engineer to lead architecture, development, and validation of secure system firmware for ARM-based server platforms.

The role emphasizes firmware authentication, secure boot, cryptographic services, device attestation, and trusted platform capabilities across the product lifecycle. Collaborate with hardware, firmware, security, validation, ODM, and customer teams to deliver robust security features and scalable processes.