Senior Product Security Software​/Firmware Engineer

This role is a hybrid position with an expectation to work on average 2 days per week from an HPE office.

Hewlett Packard Enterprise is a global edge‑to‑cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud. Our culture thrives on finding new and better ways to accelerate what’s next and values diverse backgrounds.

Location:

Sunnyvale, CA (Hybrid – 2–3 days onsite per week)

This hybrid role requires onsite presence 2–3 days per week for key management activities that must be operated in a highly secured environment.

We are seeking a highly experienced Senior Software/Firmware Engineer to join our product security team. The role focuses on firmware development, secure boot technologies, hardware root of trust security, and cryptographic key management. The ideal candidate has deep expertise in embedded systems, C/C++ development, hardware security architecture, digital signature, and cryptography algorithms.

• Secure Boot – Establishing platform hardware root of trust, boot integrity, firmware authentication, and platform protection.
• Key Management – Secure creation, storage, distribution, renewal, and revocation of cryptographic keys and digital certificates.

• Lead the design, development, testing, and integration of complex firmware and security solutions.
• Architect and implement secure firmware features across embedded and platform environments.
• Drive technical direction and provide leadership for cross‑functional engineering initiatives.
• Review system designs, code, and validation strategies to ensure compliance with security, quality, and reliability standards.
• Collaborate with internal and external engineering teams to deliver secure and scalable platform solutions.
• Evaluate emerging security technologies and integrate them into future product designs.
• Mentor and guide junior engineers while promoting engineering best practices.

• Bachelor's or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related field.
• 8+ years of software, firmware, or embedded systems development experience.
• Strong proficiency in C/C++; experience with Python, Rust, Bash, or Shell scripting is a plus.
• Extensive experience in embedded system development and debugging.
• Strong understanding of firmware architecture and hardware‑based security technologies.
• Strong understanding of different cryptographic algorithms.
• Experience with Trusted Platform Module (TPM) technologies and Trusted Computing Group (TCG) standards.
• Experience developing and executing test plans, debugging complex issues, and creating validation tools.
• Excellent analytical, problem‑solving, communication, and technical leadership skills.

• Experience with Secure Boot architectures and implementation.
• Knowledge of firmware and boot loader technologies such as UEFI and U‑Boot.
• Understanding of hardware security modules and hardware root‑of‑trust technologies.
• Experience with cryptographic systems, key management, and digital signature technologies.
• Familiarity with Post‑Quantum Cryptography (PQC) algorithms and emerging security standards.
• Experience designing secure platform architectures for enterprise or consumer devices.

We’re looking for engineers who enjoy solving challenging platform security problems at the intersection of firmware, hardware, and cryptography. Successful candidates will have a strong systems mindset, hands‑on debugging skills, and a passion for building secure and trustworthy computing platforms.

We strive to provide a comprehensive suite of benefits that supports physical, financial, and emotional wellbeing.

We invest in your career with programs designed to help you reach any career goals you have, whether you want to become a knowledge expert or apply your skills to another division.

We are unconditionally inclusive in the way…