Experience: 10+ years
Location: Noida
Employment Type: Full‑time
Team: Platform / Systems / Security Engineering

Role Summary

We’re looking for a Principal Software Engineer who combines deep systems expertise with security-first design. You will lead architecture and development across Linux kernel, boot loader, and user‑space middleware, building secure, reliable, and performant platforms that power our next-generation [products/platforms]. You’ll set technical direction, elevate engineering standards, mentor senior engineers, and partner with cross-functional stakeholders to deliver high-impact outcomes.

What You’ll Do

• Design and implement security features in boot loader complementing secure boot, measured boot, and chain of trust.
• Design and implement security features in Linux kernel features (e.g., device drivers, filesystems, networking stack, security modules).
• Build and optimize user‑space middleware (e.g., IPC frameworks, OpenSSL, DPDK) leveraging Userspace drivers.
• Implement and integrate security protocols (e.g., TLS 1.3, DTLS, IPsec, SSH,) and hardware-backed key management.
• Drive threat modeling, secure design reviews, and code audits, ensuring compliance with best practices (e.g., ASLR, stack canaries, SELinux/AppArmor policies).
• Lead performance and reliability engineering including profiling, tracing (ftrace, eBPF, perf), memory safety, and resource efficiency.
• Define platform CI/CD for low-level software (artifact signing, SBOMs, reproducible builds, Yocto/Buildroot/DEB/RPM pipelines).
• Mentor and grow engineers, guide technical roadmaps, and make pragmatic build/buy/OSS leverage decisions.
• Collaborate with Design team, IP team, DevOps, product, and QA to meet functional, performance, and certification goals.

Qualifications (Required)

• 10+ years of professional experience in systems/embedded/platform engineering, including technical leadership at team or org scale.
• Expert in C/C++ for systems-level development; nice to have proficiency in Rust for memory‑safe components.
• Demonstrated depth in Linux kernel internals (at least two areas): drivers, MM, scheduler, net, filesystems, security modules (LSMs), eBPF.
• Hands-on boot loader development and customization (U‑Boot, GRUB, secure boot flows, measured boot, boot-time diagnostics).
• Strong knowledge of security protocols and cryptography (TLS/IPsec, X.509/PKI, key exchange, HSM/TPM, secure storage, attestation).
• Experience building user‑space middleware (IPC, service management with systemd, observability/logging, configuration frameworks).
• Proficiency with Linux build systems and distributions for embedded/platform (Yocto/OpenEmbedded, Buildroot) or enterprise (Deb/RPM).
• Proven ownership of architecture/design documents, RFCs, and shipping production-quality platform software.
• Debugging mastery using kernel/user tools (kgdb, crash, perf, ftrace, strace, gdb, BPF tools) on real hardware/virtualized targets.

Nice to Have

• Trusted execution & firmware: ARM TrustZone, OP‑TEE, Intel SGX/TDX, AMD SEV, TF‑A, UEFI, ACPI/Device Tree.
• Virtualization & containers: KVM/QEMU, Kata Containers, cgroups, namespaces; container security (seccomp, SELinux/AppArmor).
• Networking & storage: DPDK, SR-IOV, NVMe, RDMA, io_uring; high‑throughput low‑latency pipeline design.
• Safety/security certifications: FIPS 140‑3 validation, Common Criteria, ISO 27001/21434, AUTOSAR, IEC 62443.
• Secure software supply chain: artifact signing, SBOM (SPDX/CycloneDX), SLSA levels, reproducible builds.
• Scripting/automation: Python, Bash; Bazel/CMake/Meson; advanced CI (GitHub Actions, GitLab, Jenkins, Buildkite).
• Observability: eBPF tracing, LTTng, SystemTap, ETW analogs; production telemetry & fleet operations.
• HW familiarity: SoC bring‑up, board support packages (BSP), JTAG, oscilloscopes, power/thermal profiling.

More information about NXP in India...

#LI-2734