Senior Research Engineer, Embedded Security Software

SOLiD Gear•Plano, TX

13h•Onsite

About The Position

We are seeking a highly motivated and technically qualified Senior Research Engineer, Embedded Software . In this role, you will lead the security implementation for our next-generation O-RAN Radio Unit (O-RU). You will work closely with the BSP and Hardware teams to implement the Root of Trust (RoT), secure the boot chain, and harden the Linux OS. This is a lab-based role requiring physical access to Hardware for security provisioning (fuse burning), key management, and testing. Reporting to the Vice President of R&D, this position is a key contributor to SOLiD's continued growth and success.

Requirements

Experience with ARM TrustZone or OP-TEE.
Understanding of O-RAN security specifications (WG11).
Bachelor’s degree (in EE/CE/CS) with 5 + years of related experience or master’s degree (in EE/CE/CS) with 3 + years of experience in telecommunications, or related field
Experience: 5+ years of embedded security or systems engineering experience.
Technical Skills: Hands-on experience with Secure Boot flows (signing images, burning fuses) on ARM-based SoCs.
Experience with TPM (Trusted Platform Module) integration and TCG standards.
Strong knowledge of cryptographic primitives (RSA, ECC, AES, SHA) and PKI (Certificates, CA).
Proficiency in C programming and Linux kernel/driver security features.
Familiarity with network security protocols (EAP, TLS, IPsec).
On-site Requirement: Critical requirement to work on-site for hardware provisioning, fuse programming, and JTAG debugging.

Responsibilities

Secure Boot Implementation: Implement and validate the Secure Boot chain (BootROM → U-Boot → Linux Kernel) using hardware Root of Trust.
TPM Integration: Integrate TPM 2.0 module for key storage and platform attestation; develop drivers and userspace tools for TPM management.
Network Security: Implement secure network protocols including TLS 1.2/1.3, SSH, and EAP-TLS (802.1x) for O-RAN Fronthaul interface.
OS Hardening: Harden the embedded Linux system (Buildroot/Yocto) by configuring permissions, removing unnecessary services, and implementing secure storage solutions.
Crypto Implementation: Manage PKI certificates and integrate OpenSSL/mbedTLS libraries for M-plane connectivity.