4 months ago
San Diego, CA, USAStaff+
Base Salary
$260k - $320k/yr
Responsibilities
- Design hardware, software, and network architecture for secure factory-floor provisioning stations using HSMs, key injection, and AWS Private CA.
- Build and own automation for device identity provisioning, enrollment, firmware flashing, calibration, and functional testing.
- Enroll devices with correct credentials for OTA updates, session heartbeating, and deployment tracking.
- Define and maintain end-of-line test frameworks and pass/fail criteria for sensor calibration, actuator checks, and initial OTA health checks.
- Translate security requirements into contract-manufacturer procedures and threat-model factories for key leakage, firmware tampering, and supply-chain substitution.
- Maintain chain-of-custody records linking physical serial numbers with provisioned identities, calibration records, test results, and firmware versions.
- Collaborate with globally distributed firmware, cloud, manufacturing, systems, and operations teams.
Requirements
- 10+ years of experience including manufacturing engineering, test tool and framework development, manufacturing networking, and secure device provisioning or secure manufacturing processes.
- Ideally, approximately 3 years at Staff level or equivalent.
- Experience with X.509 certificate lifecycles, mTLS, device authentication and attestation, and managed certificate authority services such as AWS Private CA.
- Experience using AWS S3, IAM, ECS, KMS, CloudHSM, and Secrets Manager in secure provisioning workflows.
- Hands-on experience defining manufacturing end-of-line test frameworks and working with hardware test fixtures.
- Advanced Python or Bash skills for production-grade provisioning automation.
- Advanced skills and understanding of Rust, Bazel, and Systemd.
- Experience with embedded Linux systems and NVIDIA Jetson Orin or Thor platforms.
- Ability to design secure processes for untrusted or semi-trusted offshore contract manufacturers and air-gapped provisioning stations.
- Experience managing quality gates with contract manufacturers.
- Understanding of secure boot chains, TPM/TrustZone, cryptographic key injection, certificate provisioning, and eFuse programming.
Benefits
- Comprehensive health coverage for US-based employees, including fully paid medical, dental, and vision insurance, virtual care, and employee assistance resources.
- 23 accrued PTO days, separate sick leave, and paid company holidays.
- 401(k) retirement plan with employer match.
- Equity included.
- Free daily catered lunch, snacks, and drinks in the office.
- Collaboration with engineers, researchers, and product experts in AI and robotics.
- Opportunity to influence the product and own key initiatives.
- California role with an expected base salary range of $260,000–$320,000 USD per year.
