Senior Platform Engineer, Embedded Linux & Security

Senior Platform Engineer, Embedded Linux & Security

This role secures embedded Linux devices and the infrastructure behind them, from boot and provisioning through release, deployment, and cloud services. You'll join a small engineering team as a senior individual contributor, working across device security, DevOps, and backend development.

Work with and improve secure device provisioning and hardware-backed security, including fusing, signing, device identity, secure boot, attestation, and disk encryption.

Help define and harden software release processes from source to device.

Help design device authentication and authorization services.

Harden device images and container runtimes, including mandatory access control such as AppArmor or SELinux.

Run services with least privilege: systemd sandboxing, non-root accounts, and correct file ownership and permissions.

Set SSH and firewall policy, and close debug paths such as UART, JTAG, and USB recovery.

Secure web services on devices and in the cloud with TLS and mTLS, reverse proxies, and least-privilege service accounts.

Threat model the platform, help scope pentests, and track vulnerabilities.

Plan security for partner engagements and third-party integrations: define requirements, review interfaces and data flows, and set access boundaries.

Help shape fleet management and over-the-air update approaches, from device enrollment through deployment.

Build cloud pipelines for device data an