Job Description

Note: This posting covers two roles. Role 1: OS/Device Lifecycle Engineer (Secure Boot / OTA / Identity). Remote, UK/EU preferred. You will own single-layer ownership of the device lifecycle including secure boot and trust chain (ROM → U-Boot → kernel → rootfs), OTA updates and rollback strategy (A/B, recovery modes), device identity and lifecycle (provisioning, key rotation), failure recovery (power loss, corrupted SD, watchdogs). You must be able to discuss SD vs eMMC vs NVMe tradeoffs and their corruption mitigation, brown-out behavior, thermal throttling, BSP maturity, and camera ISP/NPU concurrency constraints given vendor SDK realities. This is a senior, hands-on role for someone who has shipped embedded devices and understands real-world reliability. Responsibilities include designing and implementing secure boot, OTA, provisioning, key management, and recovery paths; coordinating with hardware and kernel teams; ensuring robust failure handling and platform security. Qualifications: experience shipping embedded systems, ROM/U-Boot/kernel/rootfs boot chain, secure OTA mechanisms, device identity management, disaster recovery, and an ability to reason about storage media tradeoffs. Note: You will own multiple aspects across the software stack and work with limited resources.