Senior Technical Architect

Technology, Data & Digital · Software & Web Development · Embedded Systems · Cybersecurity

In short

Senior Technical Architect role focusing on hardware root-of-trust to application-layer security for ARM-based SoCs in industrial, robotics, and connected edge products. Responsibilities include secure boot, TEE enablement, key management, and secure provisioning, requiring 8-10 years of embedded systems experience with a focus on platform security.

Responsibilities

Own the hardware root-of-trust to application-layer security chain on ARM-based heterogeneous SoC platforms.
Bring up and harden secure boot and measured boot chains.
Design, port and maintain TEE solutions including Trusted Applications.
Implement TrustZone-based isolation and secure memory partitioning.
Define and implement device identity, key provisioning, fusing and certificate flows.
Implement anti-rollback, debug lockdown, secure JTAG and lifecycle state management policies.
Support cryptographic acceleration enablement.
Contribute to threat modelling, security architecture reviews and vulnerability triage.
Work with silicon vendor security documentation and mentor engineers on secure coding practices.

Requirements

8–10 years of embedded systems engineering with at least 4 years focused on platform security.
Strong C, with working ARM assembly and secure firmware debugging skills.
Hands-on secure boot / measured boot bring-up on ARM SoCs — chain of trust, image signing, verified boot.
Practical TrustZone and TEE experience: OP-TEE, GlobalPlatform TEE APIs, Trusted Application development.
Applied cryptography fundamentals — AES, RSA/ECC, SHA, HMAC, key derivation, PKI and certificate chains.
Bootloader internals (U-Boot / ABL / TF-A class), device tree and early-boot debug using JTAG and serial consoles.
Understanding of secure provisioning in manufacturing — eFuse/OTP programming, HSM-backed signing infrastructure.

Desired Qualifications

Exposure to Android Verified Boot, Keymaster/KeyMint, StrongBox or Windows-based secure boot flows.
Familiarity with security standards and certification regimes such as IEC 62443, FIPS 140-3, SESIP or PSA Certified.
Experience with hypervisor-assisted isolation and secure virtualization.
Fuzzing, static analysis and secure SDLC tooling.

Benefits

Supercharge your potential.
Find your career.
Find your spark.
A place that knows that helping its customers stay on top starts by putting its people first.

Skills

CARM assemblySecure firmware debuggingSecure bootMeasured bootARM SoCsImage signingVerified bootTrustZoneTEEOP-TEEGlobalPlatform TEE APIsTrusted Application developmentAESRSA/ECCSHAHMACKey derivationPKICertificate chainsU-BootABLTF-ADevice treeJTAGSerial consoleseFuseOTP programmingHSMAndroid Verified BootKeymasterKeyMintStrongBoxWindows secure bootIEC 62443FIPS 140-3SESIPPSA CertifiedHypervisorSecure virtualizationFuzzingStatic analysisSecure SDLC

#Security#Embedded Systems#ARM#SoC#Robotics#Edge Computing

About HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

See all open jobs at HCLTech Read more about HCLTech Website