Senior Firmware Security Architect, Networking

Role overview

Help strengthen the security of networking devices by shaping firmware security architecture and guiding its implementation across hardware and software teams. The role covers the device lifecycle, from provisioning and secure startup through runtime protections, maintenance, and field updates, and combines threat analysis with hands-on engineering guidance.

Responsibilities

- Define firmware security architecture, including trust boundaries, privilege separation, device identity, key storage, secure boot, and protected update flows. - Threat-model firmware and embedded subsystems, examining startup processes, privileged environments, and interfaces exposed to hosts or networks. - Turn identified risks into practical security requirements, architectural decisions, mitigations, and design reviews. - Specify security capabilities for provisioning, attestation, debug access, runtime protection, and update processes. - Work with hardware and chip architects on security primitives and how firmware uses them across products. - Promote secure development practices, including safer C coding, static analysis, and fuzzing of firmware-facing interfaces.

Requirements

- Degree in computer science, electrical engineering, or a related area, or equivalent experience. - At least eight years in product security, firmware security, or security research, including practical work with embedded or firmware code. - Experience designing authorization policies, role-based access control, and administrative role separation for production systems. - Knowledge of applied cryptography, secure boot, code signing, attestation, threat modeling, attack methods, and mitigations. - Ability to work independently and collaboratively in a changing technical environment, with strong communication skills.

Nice to have

- Graduate degree in a relevant technical field. - Experience with networking-device interfaces such as MMIO, DMA, PCIe, mailboxes, and doorbells, or with hardware roots of trust and hardware-enforced isolation. - Familiarity with network drivers, control planes, management interfaces, embedded network operating systems, or large-scale data center security.

Benefits and work setup

- The listing describes eligibility for equity and benefits. It gives base salary ranges of USD 184,000–287,500 for Level 4 and USD 224,000–356,500 for Level 5; actual pay depends on location and experience.