Staff Software Engineer – Embedded & Secure Firmware

Staff Software Engineer Embedded & Secure Firmware

Our Cloud BU is seeking a Staff Software Engineer with strong embedded systems expertise and growing or established depth in platform security and trusted execution environments. This role targets our next-generation high?performance inference accelerator platforms for Edge and Data Center deployments.
The position sits at the intersection of low-level firmware, SoC architecture, device drivers, and secure system design, with increasing emphasis on enabling hardware-assisted security, trusted devices, and confidential computing in multi-tenant server environments.
Core Skills & Experience (Required)
Embedded Software & Systems

• Strong experience developing C/C++ firmware with hands-on debug and test, preferably using GNU/LLVM toolchains
• Development on embedded platforms using stop-mode debugging (JTAG/SWD, serial debuggers, RAM dumps)
• Experience with Board Support Package (BSP) development, including:
  • Device driver development
  • Board bring-up
  • RTOS integration
  • Secure boot and TrustZone enablement
• Solid understanding of RTOS concepts, multi-threaded programming, and synchronization
• Deep knowledge of SoC architecture, including:
  • CPU cores, caches, MMU
  • Memory subsystems
  • Bus architectures
  • Interrupt controllers, timers, and common hardware IP blocks
• Experience developing and debugging peripheral drivers

Software Engineering Practices

• Proficiency with source code and configuration management tools such as git and Gerrit
• Comfortable working in a structured software development environment, including low-level implementation, test, and debug
• Strong written and verbal English communication skills
• Ability to collaborate effectively in a high?caliber, international, multi?site team

Security & Trusted Computing (Strongly Desirable / Focus Areas)
While not required for all candidates, experience or strong interest in platform security is highly valued at the Staff level:

• Experience with or exposure to secure boot, TrustZone, or other Trusted Execution Environments (TEE)
• Familiarity with secure system design concepts, including isolation, attestation, and lifecycle management
• Understanding of cryptographic primitives and their practical application in:
  • Security protocols
  • Firmware and system-level security architecture
• Experience contributing to or working with security?related firmware, BSPs, or device drivers
• Interest in confidential computing, trusted devices, or multi-tenant isolation models

Advanced / Platform-Level Security (Highly Desirable)
For candidates leaning into the security track, the following are strong differentiators:

• Experience with PCIe-based platforms, including:
  • SR-IOV
  • Trusted device assignment
  • High-speed interconnect security
• Familiarity with security and management specifications such as:
  • TDISP
  • SPDM
  • IDE / DOE
  • MCTP
  • DICE
• Experience integrating or developing PCIe security protocol software
• Knowledge of attestation mechanisms, TPM concepts, and platform-level trust chains
• Exposure to standards or ecosystems such as OCP, TCG, or Confidential Computing Consortium
• Hands-on experience with ARM TrustZone environments
• Experience with Linux-based embedded systems at kernel, driver, or firmware boundary
• Contributions to open-source security, firmware, or virtualization projects

Interfaces, Tooling & Debug (Desirable)

• Familiarity with high-speed interfaces such as PCIe and LPDDR
• Familiarity with low-speed interfaces including I2C, SPI, SPMI, AVSBus, PMBus
• Proficiency with software development and debug tools, including:
  • Compilers and profilers
  • Emulators
  • JTAG and serial debuggers
  • Logic analyzers
• Python scripting for automation, tooling, or debug workflows
• Experience with RISC?V (plus)

Experience Level

• Typically 6+ years of relevant experience in embedded, systems, or firmware development
• Demonstrated ability to operate at Staff Engineer level:
  • Technical ownership of complex subsystems
  • Cross?team collaboration
  • Architectural thinking alongside hands-on implementation