Secure Embedded Systems Engineer - Kernel & Boot Hardening

dorle-controls-llc; Foster City (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

dorle-controls-llc is seeking an Embedded Systems Security Engineer in Foster City, CA to harden its next‑generation embedded Linux platform. You will bridge hardware security, kernel hardening, and secure user-space containment while automating security pipelines in CI/CD.

You’ll collaborate with manufacturing to provision devices securely, implement hardware root of trust, secure boot, and OTA resilience, applying SELinux/AppArmor, U-Boot, and modern sandboxing techniques.

Qualifications

• Bachelor's degree in CS/EE or related field.
• 6+ years in Embedded Linux development, BSP, and board bring-up.
• 3+ years deploying device-level security in production hardware.
• Expertise in bootloaders (U-Boot/Barebox) and Linux kernel storage/security.
• Knowledge of ARM TrustZone and Linux containment tools.

Responsibilities

• Platform Hardening & Architecture: design Hardware Root of Trust and Secure Boot.
• Storage & Integrity: implement dm-verity for verified read-only roots and encryption.
• Trusted Execution Environments: develop and maintain OP-TEE and Secure Applications.
• Application Sandboxing: enforce isolation with SELinux/AppArmor, cgroups, namespaces, and seccomp.
• DevSecOps Automation: build cryptographic signing pipelines in CI/CD with HSMs.
• Production Provisioning: write scripts for eFuses/OTP and end-of-line security tests.
• System Resilience: design A/B partitioning for OTA update resilience.

Skills

Embedded Linux development

Board bring-up

BSP customization

Device security hardening

ARM TrustZone

SELinux/AppArmor

CI/CD security pipelines

C programming

Python scripting

Education

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related field

Tools

U-Boot Verified Boot

Barebox

dm-verity

dm-crypt

OP-TEE

Yocto Project

Buildroot

Job description

dorle-controls-llc is seeking an Embedded Systems Security Engineer in Foster City, CA to harden its next‑generation embedded Linux platform. You will bridge hardware security, kernel hardening, and secure user-space containment while automating security pipelines in CI/CD.

You’ll collaborate with manufacturing to provision devices securely, implement hardware root of trust, secure boot, and OTA resilience, applying SELinux/AppArmor, U-Boot, and modern sandboxing techniques.