Senior Staff Software Engineer - Secure Manufacturing

Humanoid • San Diego, CA

1d

About The Position

Humanoid is seeking a Senior Staff Software Engineer to own the secure manufacturing pipeline as the company moves from robot prototypes to manufacturing. The role connects secure boot and firmware systems with the cloud control plane, turning bare boards at contract-manufacturer facilities into cryptographically enrolled, OTA-ready devices trusted by the cloud fleet.

The engineer will design and implement factory-floor provisioning stations, build an automated device provisioning toolchain, enroll devices with the correct cloud identities, and own the end-of-line test framework. The role also involves defining secure manufacturing procedures with contract manufacturers, protecting keys and firmware throughout production, and maintaining traceability between each physical device and its identity, calibration, test results, and firmware version. The position works closely with globally distributed firmware, cloud, manufacturing, systems, and operations teams.

Requirements

• 10+ years of experience, including manufacturing engineering, with comparable depth of experience developing test tools and frameworks.
• Experience with networking in a manufacturing environment.
• Experience focused on secure device provisioning and/or secure manufacturing processes.
• Experience with X.509 certificate lifecycles, mTLS, device authentication and attestation, and managed CA services such as AWS Private CA.
• Experience with AWS infrastructure including S3, IAM, ECS, KMS, CloudHSM, and Secrets Manager for secure provisioning workflows.
• Hands-on experience defining manufacturing test frameworks and experience with hardware test fixtures.
• Advanced Python or Bash skills for developing production-grade provisioning toolchains.
• Advanced skills and understanding of Rust, Bazel, and Systemd.
• Experience with embedded Linux systems.
• Ability to design secure processes for untrusted or semi-trusted offshore contract manufacturers and air-gapped station design.
• General understanding of secure boot chains, TPM/TrustZone, cryptographic key injection, certificate provisioning, and eFuse programming.

Nice To Haves

• Ideally, 3 years at a Staff level or equivalent.
• Experience with NVIDIA Jetson Orin/Thor platforms.

Responsibilities

• Design the secure manufacturing station, including its hardware, software, and network stack, using technologies such as HSM, key injection, and AWS Private CA.
• Integrate the secure boot fuse and flashing flow developed by the secure boot and firmware team.
• Build and own the automation pipeline for identity provisioning, enrollment, firmware flashing, calibration, and functional testing of devices.
• Enroll each device in a registry with the credentials needed for OTA, session heartbeating, and deployment tracking.
• Own the end-of-line test framework and define device pass/fail criteria, including sensor calibration, actuator checks, and an initial OTA health check.
• Translate security requirements into procedures that contract manufacturers can execute, and threat-model factories for key leakage, firmware tampering, and supply-chain substitution.
• Maintain chain of custody by linking each physical serial number with its provisioned identity, calibration records, test results, and firmware version at manufacture.
• Collaborate daily with globally distributed firmware, cloud, manufacturing, systems, and operations team members.
• Manage quality gates with contract manufacturers.

Benefits

• Comprehensive health coverage for US-based employees, including fully paid medical, dental, and vision insurance.
• Virtual care and employee assistance resources.
• 23 days of accrued PTO, separate sick leave, and paid company holidays.
• 401(k) retirement plan with employer match.
• Equity.
• Free daily catered lunch, snacks, and drinks in-office.
• Opportunity to collaborate with engineers, researchers, and product experts in AI and robotics.
• Freedom to influence the product and own key initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed