Senior Embedded Security Architect — Remote & OS Hardening

GlobalLogic; Belmont (CA); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Exciting projects

Collaborative environment

Work‑life balance

Professional development

Excellent benefits

Job summary

GlobalLogic seeks an experienced security‑focused embedded Linux engineer in Foster City, CA. You will design hardware root of trust and secure boot across boot stages, integrate a TEEs, and enforce strict sandboxing policies while enabling automated signing pipelines for firmware.

You will also collaborate with manufacturing for secure OTP programming and end‑of‑line validation of security features prior to shipping.

Qualifications

• 6+ years of professional Embedded Linux development, board bring‑up and BSP customization.
• 3+ years deploying device‑level security features into production hardware.
• Expert knowledge of bootloader configurations and Linux kernel storage/security subsystems.
• Deep understanding of ARM TrustZone (ARMv7-A / ARMv8-A) and TrustZone exception levels.

Responsibilities

• Design and implement hardware Root of Trust and Secure Boot architecture across first-stage bootloader through the Linux kernel.
• Develop, integrate, and maintain a TEE (e.g., OP‑TEE) and Secure/Trusted Applications.
• Enforce strict user-space isolation and sandboxing (SELinux/AppArmor, cgroups, namespaces, seccomp).
• Build automated cryptographic signing pipelines in CI/CD (GitLab CI, GitHub Actions) to sign bootloaders, kernels, and OTA payloads using HSMs or secure vaults.
• Collaborate with manufacturing to burn eFuses/OTP securely and create end-of-line test software to validate security features before shipping.

Skills

Embedded Linux

BSP customization

Bootloader config

Kernel security

ARM TrustZone

SELinux/AppArmor

Yocto/Buildroot

C programming

Python scripting

Bash scripting

Education

Bachelor's or Master's degree in Computer Science or Electrical Engineering or Mathematics

Tools

U-Boot

Barebox

dm-verity

dm-crypt

GitLab CI

GitHub Actions

Job description

GlobalLogic seeks an experienced security‑focused embedded Linux engineer in Foster City, CA. You will design hardware root of trust and secure boot across boot stages, integrate a TEEs, and enforce strict sandboxing policies while enabling automated signing pipelines for firmware.

You will also collaborate with manufacturing for secure OTP programming and end‑of‑line validation of security features prior to shipping.