Senior Staff Software Engineer - Secure Manufacturing

Thehumanoid; San Diego (CA); On-site; USD 260,000 - 320,000; Full time

Benefits offered by this job

Comprehensive health coverage

23 days of PTO

401(k) retirement plan

Equity opportunities

Free daily catered lunch

Collaboration with experts

Job summary

Thehumanoid in San Diego, CA is seeking a Security Manufacturing Engineer to develop and implement secure processes for manufacturing humanoid robots. The ideal candidate should have over 10 years of experience in embedded systems and device security, with deep expertise in AWS infrastructure and secure provisioning workflows.

The role offers comprehensive health benefits, 23 days PTO, and a base salary range of $260,000–$320,000 annually based on experience. A collaborative environment with top-tier engineers awaits.

Qualifications

• 10+ years of experience in embedded systems or manufacturing engineering.
• PKI and device identity expertise with X.509 certificate lifecycles.
• Experience in AWS services related to security and provisioning workflows.

Responsibilities

• Design the secure manufacturing station, including hardware and software architecture.
• Build the provisioning toolchain for device identity provisioning.
• Collaborate with contract manufacturers to implement security procedures.

Skills

Embedded systems

Device security

Manufacturing engineering

Secure device provisioning

AWS infrastructure (S3, IAM, ECS)

Python or Bash scripting

Secure manufacturing design

Hardware root of trust

Job description

Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 Alpha - our rapidly developed humanoid platform now running in real industrial pilots - and we’re growing the team to take it even further.

About the Role

We’re scaling from prototypes to manufacturing, and the process maturity needs to match. This role owns the secure manufacturing pipeline — the procedures, tooling, and controls that take a bare board in an untrusted CM facility and turn it into a cryptographically enrolled, OTA-ready device that our cloud fleet trusts. You’ll be the bridge between our secure boot/firmware teams and the cloud control plane, connecting them at the point of manufacture.

What You'll Do

• Design the secure manufacturing station — Architect the hardware, software, and network stack for factory floor provisioning stations (HSM, key injection, AWS Private CA, secure boot fuse programming).

• Build the provisioning toolchain — Own the automation pipeline that takes a bare device through identity provisioning, firmware flashing, calibration, and functional test.

• Bridge device and cloud identity Enroll every device into a registry with correct credentials for OTA, session heartbeating, and deployment tracking.

• Own the EOL test specification — Work with peer teams to define pass/fail criteria for devices leaving the line: sensor calibration, actuator checks, secure boot verification, and initial OTA health check.

• Work with contract manufacturers — Translate security requirements into CM-executable procedures; threat-model the factory for key leakage, firmware tampering, and supply chain substitution.

• Maintain chain of custody — Link each physical serial number to its provisioned identity, calibration records, test results, and firmware version at manufacture.

• Collaborate across teams — Work daily with a globally distributed team of firmware, cloud, manufacturing, systems and operational team members.

What We're Looking For

• 10+ years of experience in embedded systems, device security, or manufacturing engineering, with at least 3 years focused on secure device provisioning and/or secure manufacturing processes. And ideally 3 years in a Staff level role.

• PKI and device identity — Experience with X.509 certificate lifecycles, mTLS, device attestation and managed CA services like AWS Private CA.

• AWS infrastructure — S3, IAM, ECS, KMS, CloudHSM and Secrets Manager for secure provisioning workflows.

• EOL test and calibration — Hands‑on experience defining manufacturing test specifications, building automated fixtures, and managing quality gates with contract manufacturers.

• Scripting and automation — Advanced skills in Python or Bash for developing production‑grade provisioning toolchains.

• Embedded Linux systems — Experience with NVIDIA Jetson Orin/Thor platforms.

• Secure manufacturing design — Ability to design secure processes for untrusted or semi‑trusted offshore CMs, including A/B partitioning, signed image verification, and air‑gapped station design.

• Hardware root of trust understanding — General understanding of secure boot chains, TPM/TrustZone, cryptographic key injection, certificate provisioning, and eFuse programming.

What We Offer

• Comprehensive health coverage for US‑based employees, including fully paid medical, dental, and vision insurance, with virtual care and employee assistance resources.

• Meaningful time off to rest and recharge: 23 days of PTO (accrued), separate sick leave, and paid company holidays.

• 401(k) retirement plan with employer match.

• Equity included–we believe builders should share in what they build.

• Free daily catered lunch, snacks, and drinks in‑office.

• Collaboration with top‑tier engineers, researchers, and product experts in AI and robotics.

• Freedom to influence the product and own key initiatives.

For this role in California, the expected base salary range is $260,000–$320,000 USD per year; your placement in that range depends on how your experience maps to our internal leveling.