Principal Platform Security Architect -Firmware & Operating Systems

About this role

Job Overview: We are looking for a Platform Security Architect to support the design and improvement of security mechanisms across platform firmware and embedded Linux environments. This is a hands-on technical role spanning both embedded systems (e.g., Yocto-based platforms) and data center systems (e.g., BMC and platform firmware). The work includes securing boot chains, firmware update mechanisms, and Linux-based management environments, including embedded controllers and server management subsystems

You will work closely with firmware and platform engineering teams to help integrate security controls across BIOS, BMC, and device firmware, and collaborate with internal security evaluation teams to support validation and continuous improvement of these controls. The role involves working across low-level firmware, embedded Linux, and system hardening, with opportunities to contribute at both design and implementation levels. Responsibilities: Firmware Security: Evaluate and support integration of security mechanisms across BIOS, BMC, and device firmware, including secure boot, firmware verification, update flows, rollback protection, and debug controls Embedded Linux & BMC Security: Contribute to improving the security of Linux-based management environments through system hardening, service isolation, access control, and secure configuration System Hardening: Identify potential attack surfaces and configuration gaps, and help apply and validate hardening measures and secure defaults Security Validation & CI Integration: Collaborate with internal security evaluation and engineering teams to support testing, develop validation tools/scripts, and integrate security checks into CI workflows Threat Analysis: Support threat modeling and analysis of firmware and management plane components to identify attack paths and improvement areas Required Skills and Experience : Hands-on experience with embedded Linux systems, including building and customizing platforms using Yoc

Apply for this role on ARM’s official careers site.