Technical Program Manager III, Security and Firmware, Platforms and Devices

Google; Mountain View (CA); On-site; USD 163,000 - 236,000; Full time

Benefits offered by this job

Health, dental, vision, life, and STD/

401(k) with company match

Paid time off: 20 days

Sick time 40h/yr

Maternity leave: 28–30 weeks

Baby bonding leave: 18 weeks

Holidays: 13 days

Job summary

Google is seeking a Technical Program Manager to lead complex OS security, privacy, and firmware projects. You will plan requirements with internal customers and shepherd programs through the full lifecycle, coordinating schedules, risks, and stakeholder communications.

You will work with engineers, product teams, and suppliers to drive secure, timely platform releases, ensure hardware-backed security measures, and manage privacy reviews and compliance across multiple devices and updates.

Qualifications

• Bachelor's degree in a technical field or equivalent practical experience.
• 5 years of experience in program management.
• Experience in security engineering standards and practices, or managing security or privacy programs.
• Experience working with operating systems, firmware, or embedded software development teams.

Responsibilities

• Define the multi-quarter roadmap for OS security, privacy, and firmware, translating ambiguous requirements into structured programs with milestones and risk ratings.
• Manage programs for the platform's boot and update stack including verified boot, OTA updates, and recovery with vendor alignment.
• Direct security and privacy launch approval processes for platform releases and new hardware form factors with privacy design reviews and audits.
• Guide vulnerability management and incident response initiatives from OS to vendor firmware, tracking findings and reducing risk.
• Cultivate partnerships to deliver platform capabilities like hardware-backed key management, building scalable tooling and improving review processes.

Skills

Program management

Security engineering

OS/firmware

Embedded software

Cross-functional leadership

Vulnerability management

Privacy safeguards

Education

Bachelor's degree in technical field

Job description

Benefits

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Applicants in San Francisco

Qualified applications with arrest or conviction records will be considered for employment in accordance with the San Francisco Fair Chance Ordinance for Employers and the California Fair Chance Act.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: San Jose, CA, USA; Mountain View, CA, USA; New York, NY, USA; Seattle, WA, USA; San Francisco, CA, USA.

Minimum qualifications

• Bachelor's degree in a technical field, or equivalent practical experience.
• 5 years of experience in program management.
• Experience in security engineering standards and practices, or managing security or privacy programs.
• Experience working with operating systems, firmware, or embedded software development teams.

Preferred qualifications

• 5 years of experience managing cross-functional or cross-team projects.
• Experience with platform security technologies such as secure/verified boot, bootloaders, trusted execution environments (TEEs), hardware-backed key management, SELinux, or fuzzing.
• Experience managing technical programs for bootloaders or system firmware (e.g., U-Boot, UEFI, Android bootloaders), including flashing, A/B and over-the-air (OTA) updates, recovery, and production signing-key processes.
• Knowledge of privacy and security regulatory frameworks (e.g., GDPR, DMA, health data policies) and Android compatibility requirements (CDD/CTS/VTS).

About The Job

Google's projects, like our users, span the globe and require managers to keep the big picture in focus while being able to dive into the unique engineering challenges we face daily.

As a Technical Program Manager at Google, you lead complex, multi-disciplinary engineering projects using your engineering expertise. You plan requirements with internal customers and usher projects through the entire project lifecycle. This includes managing project schedules, identifying risks and clearly communicating them to project stakeholders.

You're equally at home explaining your team's analyses and recommendations to executives as you are discussing the technical trade-offs in product development with engineers.

Using your extensive technical and leadership expertise, you manage projects of various size and scope, identifying future opportunities, improving processes and driving the technical directions of your programs.

Fuchsia is Google's open-source, capability-based operating system, built on the Zircon microkernel and shipping on Google Nest devices. Our Security, Privacy, and Firmware program makes sure every product built on Fuchsia boots and updates reliably, is secure by design, and respects user privacy. The work spans the bootloader and verified boot, trusted execution environments, OS hardening, vulnerability response, and privacy reviews for every platform release.

We partner with Android, product teams, Legal, and silicon vendors, and much of the platform is developed in the open at fuchsia.dev.

Fuchsia is a modern, open source operating system that is simple, secure, updatable, and performant. It’s a general purpose OS, designed to power an ecosystem of hardware and software, and provides core operating system functions like system resource management, a driver framework, and software abstractions.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $163000 - $236000 (USD) + 15% bonus target + equity + benefits

Responsibilities

Learn more about benefits at Google.

• Define the multi-quarter roadmap for operating system security, privacy, and firmware, translating ambiguous requirements into structured programs with clear milestones, risk ratings, and exit criteria.
• Manage programs for the platform's boot and update stack including verified boot, over-the-air updates, and recovery while aligning release milestones and firmware readiness with external silicon vendors.
• Direct security and privacy launch approval processes for platform releases and new hardware form factors by coordinating privacy design reviews, audits, and legal alignment to ensure secure, on-time delivery.
• Guide vulnerability management and incident response initiatives from the OS level down to vendor firmware, tracking findings against severity-based SLOs and upstreaming patches to reduce measurable risk.
• Cultivate strategic cross-organizational partnerships to deliver platform capabilities like hardware-backed key management, while building scalable tooling (including AI-assisted workflows) and streamlining review processes to improve organizational efficiency.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.