Embedded Network Security Engineer
Caterpillar7 hours ago
Wuxi, ChinaMid Level
Responsibilities
- Implement and integrate mTLS device communications with Nginx, MQTT, and HTTP services, including failure, expiration, and revocation handling.
- Develop device certificate lifecycle functionality, including CSR generation, secure certificate and private-key storage, deployment, renewal, expiration detection, rotation, and automated testing.
- Implement and validate Secure Boot on NVIDIA Orin and Thor platforms, including signing-key configuration, image/kernel/device-tree signing scripts, Fuse programming verification, and boot-chain integrity testing.
- Configure and integrate ROS2 DDS Security, including Identity, Permissions, and Governance files, node-level access controls, and performance tuning.
- Implement Linux security hardening, including least-privilege configuration, SSH and service restrictions, iptables/nftables rules, and automated security baseline checks.
- Implement secure OTA verification, including package signature validation, integrity checks, anti-rollback checks, and negative test cases.
- Maintain unit tests, integration tests, deployment scripts, test reports, configuration documentation, and troubleshooting guides.
- Collaborate with security architects, platform software, testing, and field teams on integration, debugging, issue resolution, and code reviews.
Requirements
- Bachelor’s degree or higher in computer science, software engineering, cybersecurity, electronic information, or a related field.
- At least 3 years of embedded Linux development experience, including at least 1 year of network security feature development or integration experience.
- Strong C/C++ and Python/Shell programming skills with the ability to independently develop, debug, and test modules.
- Experience with Git and standard code review processes.
- Knowledge of Linux users and permissions, systemd service management, network configuration, and logging systems.
- Experience with OpenSSL command-line tools and APIs, X.509 certificates, CA issuance, certificate-chain validation, and practical TLS/mTLS integration.
- Understanding of Secure Boot and chain-of-trust fundamentals.
- Good technical documentation skills, including the ability to produce operating manuals, configuration documentation, and test records.
- NVIDIA Jetson/Orin or other embedded-platform Secure Boot enablement experience is preferred.
About Caterpillar
Caterpillar Inc. designs, manufactures, and services construction and mining equipment, diesel and natural gas engines, industrial gas turbines, and diesel-electric locomotives for infrastructure, resource, and energy customers. The public company, founded in 1925 and headquartered in Irving, Texas, sells primarily through an independent worldwide dealer network and provides equipment financing. It operates through Construction Industries, Resource Industries, and Energy & Transportation segments, with shares traded on the NYSE and Euronext Paris.