Software Engineer, HSM Infrastructure Security
Core
Design and implement security-critical software and firmware for Hardware Security Modules (HSMs), secure elements, and trusted execution environments.
Role type
Senior IC embedded security engineer (HSM/firmware)
Builds
HSM trusted applications, firmware components, host interfaces, device drivers, SDKs, middleware, and cryptographic service integrations
Domain
Hardware security, applied cryptography, embedded systems
Required skills
C, C++, Rust, applied cryptography, digital signatures, key hierarchies, secure key management, cryptographic protocol design, PKI, X.509, certificate lifecycle protocols, secure boot, remote attestation, concurrency, memory safety, privilege separation, hardware interfaces, failure modes, side-channel analysis, physical attack considerations
Preferred skills
ARM TrustZone, commercial or cloud HSM platforms, PKCS#11, KMIP, OpenSSL providers, secure-element APIs, platform-native key-storage frameworks, device manufacturing, silicon bring-up, firmware signing, anti-rollback, authenticated updates, cryptographic accelerators, custom silicon, multi-party authorization, tamper-resistant audit mechanisms, attestable policy systems, hardware-protected storage, high-assurance production security software
Technologies
PKCS#11, OpenSSL, KMIP, ARM TrustZone
Responsibilities
Design and implement security-critical software and firmware for HSMs and secure elements; Build and harden policy-to-HSM boundaries for certificate issuance and cryptographic signing; Develop cryptographic protocols spanning devices, secure hardware, policy services, and backend infrastructure; Write, review, test, and audit secure embedded software for resource-constrained environments; Develop test harnesses, emulators, fuzzers, and fault-injection tooling to validate security properties; Threat-model hardware and software trust boundaries and convert findings into engineering improvements
Seniority
Senior, hands-on IC
