Technical Leader- Platform Security

Cisco•Milpitas, CA

5d•$186,900 - $267,700

About The Position

The Technical Leader serves as the primary authority on platform security, steering the architecture, development, and integration of robust security solutions. The role spans hardware and firmware through Linux and networking operating systems such as SONiC, establishing a secure chain of trust and defining platform protection throughout the lifecycle, from manufacturing through production deployment.

Requirements

Bachelor’s degree with 8 years of related experience, Master’s degree with 6 years of related experience, or PhD with 3 years of related experience.
At least 5 years of experience with C/C++ and Python or shell, including the ability to debug across firmware, Linux, and hardware layers.
At least 8 years of experience in platform, firmware, or system security.
At least 5 years of specific expertise in UEFI Secure Boot, Linux boot and kernel architectures, and hardware Root of Trust (TPM or equivalent).
At least 8 years of strong Linux system expertise, covering boot processes, kernels, drivers, and firmware interfaces within SONiC or similar networking operating systems.

Nice To Haves

Experience with OpenBMC, Caliptra/DICE, or PKI/X.509 standards.
Proficiency in kernel or module signing and experience working with NPU platforms.
Familiarity with FIPS/Common Criteria compliance or relevant open-source security contributions.

Responsibilities

Define platform security strategies covering Root of Trust, Secure and Measured Boot, attestation, firmware integrity, and key lifecycle management.
Drive implementation of UEFI Secure Boot (PK, KEK, db, dbx), including enrollment, rotation, revocation, and debugging processes.
Integrate security protocols into Linux and SONiC environments, focusing on ONIE, kernel integrity, driver security, and firmware update mechanisms.
Define and manage manufacturing and field provisioning of keys and certificates to establish platform identity.
Conduct platform threat modeling and lead security reviews.
Mentor engineering teams across hardware, firmware, and software domains.

Benefits

Medical insurance
Dental insurance
Vision insurance
401(k) plan with matching contribution
Paid parental leave
Short- and long-term disability coverage
Basic life insurance
Restricted stock unit grants may be available, subject to eligibility and vesting conditions.
Paid holidays and a floating holiday for non-exempt employees
Birthday day off, year-end holiday shutdown, and personal wellness days
Paid vacation or flexible vacation time off, depending on employee classification
Paid sick time
Additional paid time away may be requested for critical or emergency family issues
Optional paid volunteer days
Annual bonuses may be available for non-sales roles, subject to Cisco policies.