Systems Engineer

Title:

Systems Engineer

Industry: Technology

Location:

Foster City, CA

Duration: ~6 Months

• Design and implement the Hardware Root of Trust and Secure Boot architecture from the first‑stage boot loader through the Linux kernel.
• Implement dm‑verity for cryptographically verified read‑only root file systems and secure data encryption at rest.
• Develop, integrate, and maintain a Trusted Execution Environment (TEE) and author Secure/Trusted Applications (TAs).
• Enforce strict user‑space isolation and sandboxing strategies using SELinux, App Armor, cgroups, name spaces, and seccomp filters to protect core systems from untrusted applications.
• Build automated cryptographic signing pipelines within CI/CD infrastructure to securely sign bootloaders, kernels, and OTA payloads.

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline (or equivalent practical experience).
• 6+ years of professional experience in Embedded Linux development, board bring‑up, and Board Support Package (BSP) customization.
• 3+ years of dedicated, hands‑on experience deploying device‑level security features into physical production hardware.
• Expert knowledge of boot loader configurations and customizing the Linux kernel storage/security subsystem.
• Strong proficiency in programming with advanced skills in C and scripting languages such as Python or Bash.

• Embedded Linux
• Security
• Kernel Hardening
• Cryptographic Defense
• Dev Sec Ops  Automation

Hourly rate is commensurate with experience and is an estimated range provided by Work Genius.