Security Firmware Engineer – ARM TrustZone

Blue Origin; San Diego (CA); On-site; USD 192,000 - 269,000; Full time

Benefits offered by this job

Relocation provided

Stock options

Paid time off

Education support program

Job summary

Blue Origin is seeking a seasoned firmware engineer to develop ROM code, bootloaders, and secure runtime firmware for custom ASICs. You will collaborate with hardware and software teams to define interfaces, validate designs, and support both pre- and post-silicon bring-up in a safety-conscious environment.

The role requires 5+ years in firmware and strong C skills, with familiarity in secure boot, attestation, OTA updates, and hardware interaction.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline.
• 5+ years of experience in firmware development.
• Experience developing software in C.
• Experience writing software that directly controls hardware, such as firmware, kernel device drivers, or low-level embedded code.
• Experience debugging and validating embedded firmware and hardware/software interactions.

Responsibilities

• Develop ROM code, bootloaders, and runtime firmware for secure enclaves of custom ASICs.
• Develop and support firmware for secure boot, attestation, OTA updates, manufacturing provisioning, secure debug, telemetry, recovery, tamper monitoring, and security.
• Work closely with hardware and communications systems engineers to define and implement firmware and hardware interfaces.
• Support pre-silicon firmware development, integration, and validation.
• Support post-silicon bring-up, debugging, and validation of custom ASICs.

Skills

Firmware development

C programming

Embedded systems

Low-level debugging

Hardware interfaces

Education

Bachelor's degree in CS/CE/EE

Tools

Rust no-std

Cortex-M ISA

ARM TrustZone/TF-M

RTOS: FreeRTOS/Zephyr/TockOS

CI flows

HIL testing

QEMU

Palladium

ZeBu

Job description

Blue Origin is seeking a seasoned firmware engineer to develop ROM code, bootloaders, and secure runtime firmware for custom ASICs. You will collaborate with hardware and software teams to define interfaces, validate designs, and support both pre- and post-silicon bring-up in a safety-conscious environment.

The role requires 5+ years in firmware and strong C skills, with familiarity in secure boot, attestation, OTA updates, and hardware interaction.