BootROM & Security Lead - RISC-V MPU

What You'll Do

• Secure boot & RoT development: design, implement, and maintain a production-quality secure boot and Root of Trust stack for a 64-bit RISC-V MPU platform.
• Enable and harden the boot and firmware stack (boot flow, early platform initialization, BootROM/FSBL, U-Boot, OpenSBI/firmware handoff as applicable).
• Drive OS-level enablement for security: kernel/BSP integration, Device Tree updates, reserved memory regions, firmware interfaces, and secure/non-secure boundary definitions.
• Develop and debug platform security components and drivers (crypto accelerators, key services, secure storage, lifecycle/provisioning flows, anti-rollback, and attestation hooks as applicable).
• Deliver security collateral as part of SDK releases: integration, validation, and developer-facing documentation (bring-up/debug notes, known issues, and release readiness).
• Pre- & post-silicon validation (AVV): create tests, validate on FPGA/first silicon, and root-cause issues across HW/FW/kernel (boot, crypto, isolation, and lifecycle).
• Required Qualifications B.E./B.Tech or M.E./M.Tech in Computer Engineering, Electrical/Electronics Engineering, or a related field.
• Strong experience (typically 5+ years) in low-level firmware/boot software, secure boot, and Root of Trust development on SoCs.
• Expert-level C programming; comfortable reading low-level firmware and kernel-adjacent code.
• Strong Linux internals knowledge: boot flow, memory management/MMU basics, privilege/isolation concepts, and system-level debugging.
• Hands-on SoC/platform bring-up experience and ownership mindset for security and boot-stack quality.
• Hands-on with U-Boot, Linux kernel, Device Tree, and Yocto/OpenEmbedded (or equivalent build systems).
• Strong debugging skills with GDB and at least one of OpenOCD/JTAG, Lauterbach, or similar tools.
• Experience working on FPGA, emulation, or early-silicon platforms for bring-up/validation.
• Good to Have RISC-V (RV64) security experience or strong exposure to other application-class CPU security architectures (ARM TrustZone/EL3, etc.).
• Background in pre-silicon/FPGA validation or post-silicon debug and triage for boot/security issues.
• Familiarity with platform security building blocks: secure boot, lifecycle/provisioning, secure storage, anti-rollback, attestation, and firmware/OS boundaries.
• Experience with OpenSBI, secure monitor/firmware layers, and early-boot isolation (PMP/sPMP/IOPMP or equivalents).
• Exposure to CI/CD and automated validation (test frameworks, dashboards, regressions) for boot/security quality.
• What We Offer Build a secure boot and Root of Trust stack from the ground up and see it shipped in real products.
• End-to-end ownership across pre-silicon → FPGA → first silicon → production SDK releases.
• Work closely with architects and SoC teams; your validation data drives security decisions.
• Deep technical work, strong peer group, and long-term growth on a strategic platform.
• We believe having a multicultural workplace enhances productivity, efficiency and innovation whilst our employees feel truly respected, valued and heard.
• As an affirmative employer, all qualified applicants are considered for employment regardless of age, ethnicity, marital status, citizenship, race, religion, political affiliation, gender, sexual orientation and medical and/or physical abilities.
• All offers of employment with GlobalFoundries are conditioned upon the successful completion of background checks, medical screenings as applicable and subject to the respective local laws and regulations.
• Information about our benefits you can find here: https://gf.com/about-us/careers/opportunities-asia