Software Engineer

We are seeking a highly skilled and motivated Bootloader Engineer with strong expertise in ARM64 platform bring-up and secure bootloader development for SONiC-based networking operating systems on the ARMv8 or ARMv9 SoC. In this role, you will design, develop, and optimize bootloaders (U-Boot or UEFI) and trusted firmware components, enabling secure and efficient system initialization, firmware chain-of-trust, and FIT or other combined image deployment on high-performance ARM platforms. You will collaborate closely with hardware / FPGA, Linux Kernel, and SONiC software teams to integrate secure and non-secure boot flows, set up secure signing server infrastructure and signing workflows, enable TPM/eHSM-based measurable boot, and ensure platform integrity through attestation and reliable recovery mechanisms. This position requires strong knowledge of ARM64 architecture, boot flow, memory initialization, storage management and low-level board firmware development for hyperscale data center environments.

Key Responsibilities

• Design, develop, and optimize U-Boot bootloaders and trusted firmware for ARM64 platforms
• Implement secure and non-secure boot flows integrating with TPM/eHSM for measured boot and attestation
• Set up and maintain secure signing server infrastructure and signing workflows for secure boot, including key provisioning, certificate management, access control, audit logging, and integration with firmware release pipelines
• Develop and maintain FIT image (Flattened Image Tree) for SONiC firmware packaging and boot chain management
• Work with hardware and software teams to ensure reliable bootloader-to-kernel transitions, memory initialization (DDR tuning), and peripheral bring-up
• Contribute to secure firmware digital signing, verification, rollback and update pipelines
• Validate platform boot performance /time, reliability, and compliance with secure manufacturing workflows
• Document design, test procedures, and bring-up results for internal and customer release milestones

.

Required Skills & Qualificatio

• Bachelor’s or master’s degree in computer engineering, electrical engineering, or related field.
• Solid experience in C and C++ programming for low-level firmware and boot-loader development.
• Deep understanding of ARM64 architecture, exception levels, and TrustZone-based secure world design.
• Experience working on bootloader, reflashing, software update, and recovery flows for ARM64-based server systems.
• Hands-on experience with U-Boot, Trusted Firmware-A, and FIT image creation and validation.
• Strong familiarity with eMMC, SPI NOR/NAND, NVMe and USB storage interfaces.
• Understanding of secure boot, secure signing server setup, key provisioning, and signature verification mechanisms.
• Ability to debug across hardware/software boundaries using JTAG, serial console, and low-level logging tools.
• Self-driven, highly collaborative, and detail-oriented individual passionate about secure, scalable ARM platforms.