42dot

Sr. Staff Firmware Engineer (Secure Boot & OTA implementation)

Sunnyvale, United States. Posted 4 months ago

The role

You will build a multi-stage secure boot chain and an Uptane update client for an ASIL-D safety firmware platform. This role involves implementing security architecture, fail-safe A/B updates, and hardware-enforced isolation on NXP S32K3-class MCUs.

What you will do

  • Write and own the multi-stage boot sequence on the target MCU
  • Implement atomic A/B firmware-slot and dual-bank schemes
  • Implement the on-device Uptane update client
  • Configure resource-domain controllers and core MPUs for hardware-enforced isolation
  • Implement delta application and compression-aware flash budgeting
  • Implement diagnostic reprogramming entry
  • Harden the verification path against voltage and clock glitching, fault injection and side channels
  • Write high-performance, deterministic embedded C for bare-metal and RTOS targets
  • Produce ISO 26262 work products including requirements, design, and test evidence
  • Lead bring-up on bench EVKs and production silicon using JTAG/SWD, logic analyzers and oscilloscopes

Required qualifications

  • 15+ years of firmware engineering
  • Expert-level C for bare-metal and RTOS targets
  • Personally written and shipped a bootloader on a Cortex-M or automotive MCU
  • Integrated cryptographic verification into a boot or update path
  • Implemented A/B or dual-bank activation with a recovery path
  • Built or substantially owned a software-update agent for constrained embedded devices
  • Authored ISO 26262 (or DO-178C / IEC 61508) work products
  • Proficient with JTAG/SWD, logic analyzer, oscilloscope
  • Reads schematics
  • Works from the reference manual at register level

Nice to have

  • NXP S32K3 with HSE_B
  • FS26-class safety SBC integration
  • Contributor to Uptane / TUF / aktualizr / MCUboot / SUIT
  • bsdiff-class delta tooling and compression-aware flash budgeting on MCUs
  • Safety-certified RTOS (PX5, SafeRTOS or similar)
  • Bazel build systems
  • UDS (ISO 14229) security access and reprogramming services
  • Embedded pub/sub middleware (Zenoh / zenoh-pico, DDS)
  • Automotive Ethernet (100BASE-T1, 10BASE-T1S)
  • Fault-injection or side-channel countermeasure experience in a boot path

Before you apply

  • Application Review
  • Coding Test
  • 1st interview
  • 2nd interview
  • Offer Negotiation

About the company

42dot is a mobility AI company and the Global Software Center of Hyundai Motor Group. They develop software-defined vehicle technologies and an urban transportation operating system.