Principal Engineer, Firmware Security

Micron • San Jose, CA

2d • Onsite

About The Position

As a Principal Security Firmware Engineer on Micron's enterprise SSD team, you will design and develop security features that protect next-generation storage products against evolving cybersecurity threats. You will architect and implement cryptography-based solutions — including data encryption, Root of Trust, Secure Boot, Device Attestation, and Self-Encrypting Devices (SED) — while leading the transition to post-quantum cryptography for future product generations. This role spans the full Security Development Lifecycle, from threat modeling and architecture through implementation, testing, and certification. You will work across SoC, FPGA, and simulation platforms and collaborate cross-functionally to deliver security solutions aligned with industry standards including OCP, TCG, NVMe, and PCIe.

Requirements

• Bachelor's degree in Electronics Engineering, Embedded Systems, Cyber Security, or a related field
• 10+ years of experience in security firmware development
• Hands-on experience with applied cryptography and firmware security: data encryption (AES-XTS), Root of Trust, Secure Boot, Device Attestation, TRNG/DRBG, Key Management, and Public Key Infrastructure
• Post-quantum cryptography expertise (LMS, ML-DSA, ML-KEM) and understanding of their embedded system constraints
• Knowledge of enterprise storage security standards (PCIe, NVMe, OCP, TCG, IEEE 1667, DMTF SPDM)
• Proficiency in C and Python for firmware development

Nice To Haves

• Master's degree or Ph.D. in Electronics Engineering, Embedded Systems, Cyber Security, or a related field
• Experience debugging firmware on SoC, FPGA, and simulation platforms; ability to resolve security protocol compatibility issues using JTAG, memory dumps, and bus analyzers
• Experience with Rust for firmware development
• Familiarity with AI-assisted developer tools for coding, testing, and code review (with human validation)
• Agile and SDL expertise including version control, code reviews, CI/CD, threat modeling, fuzz testing, and static/dynamic code analysis
• Technical leadership experience in security firmware architecture and multi-functional execution
• Embedded firmware experience with controller initialization, boot/update processes, RTOS, IPC, and NAND Flash management
• Participation in industry standards groups (TCG, OCP, DMTF, PCI-SIG)
• Experience with Caliptra Root of Trust and OCP L.O.C.K. integration

Responsibilities

• Design and develop security features for Micron enterprise SSDs, protecting against cybersecurity threats across the product lifecycle
• Architect, implement, and debug cryptography-based security solutions including data encryption, Root of Trust, Secure Boot and Update, Device Attestation, and Self-Encrypting Devices (SED)
• Lead the transition to post-quantum cryptography algorithms (LMS, ML-DSA, ML-KEM) for next-generation products
• Implement security protocols aligned with OCP, TCG, NVMe, and PCIe specifications
• Debug security firmware on SoC, FPGA, and simulation platforms using tools such as JTAG, memory dumps, and bus analyzers
• Drive the Security Development Lifecycle including architecture, threat modeling, security code review, fuzz testing, vulnerability testing, FIPS certification support, and OCP S.A.F.E. compliance
• Collaborate cross-functionally with firmware, hardware, and product teams to ensure security requirements are met from design through production

Benefits

• Choice of medical, dental and vision plans
• Benefit programs that help protect your income if you are unable to work due to illness or injury
• Paid family leave
• Robust paid time-off program
• Paid holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Principal