Senior Embedded Security Engineer: Secure Boot, TEE & OTA

Highbrow LLC; Foster City (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Amazon Zoox in Foster City, CA is seeking a Senior Embedded Security Engineer to harden a next-generation embedded Linux platform. You will bridge hardware security, kernel hardening, and secure user-space containment, while building CI/CD security pipelines and partnering with manufacturing for secure provisioning.

You will design hardware root of trust, implement secure boot, and develop TEEs and sandboxing to protect core systems from untrusted software.

Qualifications

• 6+ years of Embedded Linux development experience.
• Hands-on security features deployed on production hardware.
• Experience with bootloaders and Linux kernel storage/security subsystems.
• Understanding of ARM TrustZone architecture and TEEs.

Responsibilities

• Design Hardware Root of Trust and Secure Boot architecture.
• Implement dm-verity and encryption for root filesystem.
• Develop and integrate TEEs and Secure/TAs.
• Enforce container sandboxing using SELinux/AppArmor/cgroups/namespaces
• Build automated signing pipelines for bootloaders, kernels, OTA payloads.
• Collaborate with manufacturing for secure fuse burning and EOL tests.

Skills

Embedded Linux

Board bring-up

BSP customization

C programming

Python scripting

DevSecOps

CI/CD pipelines

Security feature deployment

Education

Bachelor's or Master's in CS or EE

Tools

U-Boot

Barebox

Yocto Project

Buildroot

GitLab CI

GitHub Actions

OP-TEE

Job description

Amazon Zoox in Foster City, CA is seeking a Senior Embedded Security Engineer to harden a next-generation embedded Linux platform. You will bridge hardware security, kernel hardening, and secure user-space containment, while building CI/CD security pipelines and partnering with manufacturing for secure provisioning.

You will design hardware root of trust, implement secure boot, and develop TEEs and sandboxing to protect core systems from untrusted software.