Platform Security Architect & Technical Lead

Cisco; Milpitas (CA); Vor Ort; USD 187.000 - 268.000; Vollzeit

Zusammenfassung

Cisco in Milpitas, CA is seeking a Technical Leader for the Platform Security team. You will steer architecture, development, and integration of robust security solutions spanning hardware to Linux and SONiC, ensuring a secure chain of trust across the full lifecycle.

You'll define platform security strategies, drive UEFI Secure Boot, and mentor engineering teams while collaborating across hardware, firmware, and software domains.

Qualifikationen

• Bachelor's degree with 8+ years of related experience, or higher degrees with reduced years.
• Minimum 5 years of C/C++ and Python/shell experience across firmware, Linux, and hardware layers.
• 8+ years in platform, firmware, or system security.
• 5+ years in UEFI Secure Boot, Linux boot/kernel architectures, and hardware Root of Trust.
• 8 years Linux system expertise across SONiC or similar networking OS.

Aufgaben

• Define platform security strategies including Root of Trust and Secure Boot.
• Drive UEFI Secure Boot implementation (PK, KEK, db, dbx) enrollment and rotation.
• Integrate security into Linux and SONiC environments covering ONIE and kernel integrity.
• Define manufacturing and field provisioning of keys/certificates.
• Lead security reviews and mentor cross-disciplinary engineering teams.

Kenntnisse

C/C++

Python

Shell scripting

Linux

Platform security

UEFI Secure Boot

Ausbildung

Bachelor's degree in Computer Science or Electrical Engineering

Master's degree

PhD

Tools

OpenBMC

Caliptra/DICE

PKI/X.509

Jobbeschreibung

Cisco in Milpitas, CA is seeking a Technical Leader for the Platform Security team. You will steer architecture, development, and integration of robust security solutions spanning hardware to Linux and SONiC, ensuring a secure chain of trust across the full lifecycle.

You'll define platform security strategies, drive UEFI Secure Boot, and mentor engineering teams while collaborating across hardware, firmware, and software domains.