Senior Linux Software and Security Engineer - eLxr

Aptiv; Troy (MI); Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

Hybrid work model

Health insurance

Disability coverage

RRSP matching

Learning benefits

Job summary

Wind River seeks a Senior Linux Software and Security Engineer to design, develop, and secure the eLxr distribution with patching, packaging, and CVE remediation.

You will collaborate across kernel, platform, infrastructure, and security teams, contribute upstream fixes, maintain build pipelines, and ensure secure boot and crypto configurations using OpenSSL, GnuTLS, and TPM capabilities.

Qualifications

• Bachelor’s degree in CS or a related field required.
• 12+ years of hands-on Linux engineering, software development, or distribution maintenance.
• Familiarity with STIG, CIS, FIPS 140-2x, NIST 800-53, or similar security frameworks.
• Experience with secure boot, UEFI firmware, TPM, and related boot-chain security.
• Proficiency in a systems programming language (C/C++, Rust) and/or scripting (Python, shell).
• United States citizenship or permanent residency required.

Responsibilities

• Design, develop, and maintain security components across the eLxr distribution.
• Create, update, and backport patches; contribute upstream to Debian.
• Maintain and improve packaging pipelines and build scripts for reproducible builds.
• Collaborate with kernel, platform, infrastructure, and security teams on architecture decisions.
• Document processes, package changes, and security fixes for stakeholders.
• Monitor upstream projects, Debian security advisories, and CVEs to keep systems secure.
• Work with OpenSSL, GnuTLS, and crypto toolkits to enforce strong defaults.

Skills

C/C++

Python

Security engineering

Debian packaging

OSS contributions

CI/CD

Kernel security

Cryptography

AWS

Docker

Education

B.Sc. in CS or related field

Tools

OpenSSL

GnuTLS

Debian packaging tools

Docker

Kubernetes

AWS

Job description

About Wind River

Wind River is a global leader in delivering software for mission‑critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability. Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company’s software powers generation after generation of the safest, most secure systems in the world. Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We’ve achieved recent 5G milestones including the world’s first successful 5G data session with Verizon and building one of the largest Open RAN networks in the world with Vodafone. The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a "Top Workplace" for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer‑focus, and diversity, equity, inclusion & belonging, come join us and help advance the future software‑defined world.

eLxr

eLxr is a Debian‑based Linux distribution engineered for performance, reliability, and enterprise class‑security. We are expanding our core engineering team and seeking a Senior Linux Software & Security Engineer with strong programming, packaging, and security expertise to help evolve and secure the platform.

YOUR ROLE

As a Senior Linux Software and Security Engineer on the eLxr team, you will design, develop, and maintain security related components across the distribution while also contributing to packaging, patching, and security vulnerability (CVE) remediation. This role combines hands‑on development with distribution engineering responsibilities, including upstream patch contributions to Debian, package updates, and secure build workflow support.

How You Will Contribute

• Develop and maintain software components used within the eLxr distribution (C/C++, Python, or similar languages).
• Create, update, and optimize Debian packages.
• Contribute fixes and patches upstream to Debian when appropriate, following community guidelines.
• Maintain and enhance build scripts, packaging pipelines, and system tooling to support secure and reproducible builds.
• Monitor upstream projects, Debian security alerts, mailing lists, and community patches to keep packages updated and secure.
• Collaborate on architecture and design decisions affecting distribution direction, package quality, and security posture.
• Document processes, package changes, upstream contributions, and security fixes for internal and external stakeholders.
• Work closely with kernel, platform, infrastructure, and security engineering teams.

Security Engineering & Hardening

• Investigate, triage, reproduce, and remediate CVEs across the distribution; create, backport, test, and sign patches.
• Implement distribution‑wide hardening aligned with STIG, CIS Benchmarks, and secure coding guidelines.
• Participate in FIPS‑related development and validation activities. Work with OpenSSL, GnuTLS, and other crypto toolkits to maintain secure configurations and enforce strong defaults.
• Develop and maintain secure boot, and trusted boot workflows (e.g., UEFI Secure Boot, TPM integration).

Key skills and competencies for succeeding in this role are:

• B.Sc. in Computer Science or related technical field.
• 12+ years of hands‑on experience in Linux engineering, software development, or distribution maintenance.
• Familiarity with STIG, CIS, FIPS 140‑x, NIST 800‑53, or similar security frameworks.
• Experience with secure boot, UEFI firmware, TPM, key signing, and related boot‑chain security.
• Knowledge of automated security scanning and vulnerability (CVE) management tools.
• Strong understanding of Linux internals; Debian experience preferred.
• Proficiency in a systems programming language (C/C++, Rust) and/or scripting language (Python, shell).
• Understanding of secure coding practices and general software security principles.
• United States Citizenship required or permanent residency is required.

Preferred Qualifications

• Knowledge of cryptographic libraries (OpenSSL, GnuTLS), PKI concepts, and secure protocol configuration.
• Experience with Debian packaging tools.
• Experience contributing to Debian or other open‑source communities.
• Familiarity with CI/CD systems and secure build pipelines (GitLab CI preferred).
• Understanding of kernel security features and Linux security modules (AppArmor, SELinux).
• Experience with containerization and cloud technologies, including Docker, Kubernetes, AWS.
• Strong analytical and problem‑solving abilities.
• Ability to collaborate effectively within distributed teams.
• Excellent communication and documentation skills.
• Self‑motivated, with the ability to work independently on complex tasks.

Benefits

• Hybrid work model for workplace flexibility
• Comprehensive health, dental, and life insurance
• Short and long‑term disability coverage
• RRSP matching for financial security
• Flexible time‑off policies for work‑life balance
• Employee assistance program for mental well‑being
• Learning benefits, including a LinkedIn Learning subscription and seminars

Join us at Wind River, where we're not just shaping technology; we're shaping the future of a safer, more connected world. Your journey to make a meaningful impact begins here.

APPLICANT PRIVACY NOTICE

Your privacy is of the utmost importance to us. At Wind River, we strictly adhere to all applicable data privacy laws. Please review Wind River's Applicant Privacy Notice, which can be found here.

Wind River is an Equal Opportunity Employer with a commitment to diversity. We prohibit discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

Special Clearance Requirements

This position will perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil, and therefore any offer will be contingent upon verification of both of these requirements.

Privacy Notice - Active Candidates: https://www.aptiv.com/privacy-notice-active-candidates

Aptiv is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status or any other characteristic protected by law.