Responsibilities
- Design, implement, maintain, and harden secure boot and Root of Trust solutions for embedded platforms and SoCs.
- Develop boot flow, early platform initialization, U-Boot, Linux kernel, BSP, Device Tree, and firmware-to-OS security integrations.
- Implement and debug platform security components and low-level drivers, including cryptographic accelerators, key services, secure storage, provisioning, anti-rollback, and attestation hooks.
- Lead firmware architecture definition and translate requirements into scalable embedded system designs.
- Perform hands-on platform bring-up, system-level debugging, and root-cause analysis across FPGA, emulation, early-silicon, and production environments.
- Deliver SDK security collateral, integration and validation guidance, known-issue tracking, and release-readiness documentation.
- Partner with hardware, software, QA, and validation teams to deliver reliable and secure products.
- Maintain technical documentation covering firmware architecture, design decisions, implementation details, and developer usage.
Requirements
- Bachelor's-level B.E. or B.Tech in Computer Engineering, Electrical Engineering, Electronics Engineering, or a related field, or a master's-level M.E. or M.Tech.
- 10+ years of experience in low-level firmware or boot software development, including deep secure boot and Root of Trust expertise on SoCs.
- Expert proficiency in C and strong experience with low-level firmware and kernel-adjacent code.
- Strong knowledge of Linux internals, boot flow, memory management, MMU fundamentals, privilege and isolation concepts, and system-level debugging.
- Hands-on SoC and platform bring-up experience with ownership of boot-stack quality, reliability, and security.
- Extensive experience with U-Boot, Linux kernel, Device Tree, and build systems such as Yocto, Open Embedded, Rocky Linux, or comparable environments.
- Experience using GDB and at least one of OpenOCD, JTAG, Lauterbach, or similar debugging platforms.
- Experience with FPGA, emulation, or early-silicon bring-up and validation.
- Experience with UART, SPI, and I2C hardware communication protocols.
- Experience in pre-silicon or FPGA validation, post-silicon boot and security debugging, and complex platform issue triage is valuable.
- Familiarity with secure boot, secure storage, lifecycle and provisioning, anti-rollback, attestation, and firmware and OS trust boundaries.
- Exposure to Broadcom and Marvell SDK environments.
- Strong ownership, communication, documentation, cross-functional collaboration, coding discipline, and architectural thinking.
About Gigamon
Gigamon® protects the hybrid cloud networks and data of the world’s most complex organizations. The AI-powered Gigamon Deep Observability Pipeline delivers complete visibility into all data in motion by providing trusted, network-derived telemetry directly to cloud, security, and observability tools. With AI-driven insights across packets, flows, and application metadata, organizations can detect threats concealed in encrypted and lateral traffic, resolve network and application performance bottlenecks quickly, and validate compliance while reducing operational cost and complexity. As the pioneer in deep observability, Gigamon is trusted by 4,000+ organizations worldwide, including 83 of the Fortune 100 and 9 of the 10 largest mobile network operators. Learn more at gigamon.com.