{"id":35108,"url":"https://alion.io/job/42dot-sr-staff-firmware-engineer-secure-boot-real-time-platform","title":"Sr. Staff Firmware Engineer (Secure Boot & OTA implementation)","company":{"id":256,"name":"42dot","domain":"42dot.ai","url":"https://alion.io/company/42dot","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":83,"open_postings":16,"ghost_share":0,"stale_share":0.688,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Hardware","role_family":"Hardware","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sunnyvale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":189240,"max":266760,"currency":"USD","period":"year","gross":null,"usd_annual":266760},"salary_estimate":null,"experience_years_min":15,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"DO-178C","optional":false},{"name":"Embedded C","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"RTOS","optional":false},{"name":"U-Boot","optional":false},{"name":"Bazel","optional":true},{"name":"C","optional":true},{"name":"Zenoh","optional":true}],"status":"live","first_seen_at":"2026-06-19T21:27:56Z","employer_posted_date":"2026-06-19","last_verified_at":"2026-10-30T23:43:52Z","board_verified":true,"closed_at":null,"days_open":133,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":131},"description":"We are looking for the best\nAbout Us\n42dot is a mobility AI company committed to solving mobility challenges with software and AI. As the Global Software Center of Hyundai Motor Group, 42dot pioneers the future of mobility by advancing the development of software-defined vehicles.\nWe develop safety-first, user-centric software-defined vehicle technologies that deliver the latest performance through continuous updates like smartphones. By advancing software and AI technology, 42dot envisions a world where everything is connected and moves autonomously through a self-managing urban transportation operating system.\nAbout the Role\nAs a Sr. Staff Firmware Engineer, you will build the two components everything else on the platform depends on: the multi-stage secure boot chain and the Uptane update client. The platform is a greenfield, ASIL-D safety firmware platform (ISO 26262 Safety Element out of Context) for a microzonal vehicle E/E architecture, running on NXP S32K3-class lockstep MCUs with a hardware security engine. JTAG is used once per board - to bring up the silicon and flash the immutable bootloader - and every deployment after that, including continuous integration, goes through Uptane. Until your code works, nothing ships; once it works, every engineer on the program runs it daily.\nYou implement to a security architecture owned by the platform's Firmware Security Architect and to the platform's ASIL-D rules: MISRA C, zero-deviation static analysis, static memory, requirements-based test with MC/DC coverage, and full traceability. Requirement sets for the immutable bootloader, the mutable bootloader and the update client already exist; you inherit, complete and implement them. You are the hands - and you are expected to push back when the hardware or the timing says the architecture is wrong.\nResponsibilities\nSecure Boot-Chain Implementation: Write and own the multi-stage boot sequence on the target MCU - startup code, linker command files and memory maps, flash drivers, hardware security engine integration (key catalogs, secure-boot configuration, signature-verification services), anti-rollback counters in HSE-protected storage or OTP, and recovery and fail-safe boot - with boot time measured against budget.\n\nFail-Safe A/B Update Layouts: Implement atomic A/B firmware-slot and dual-bank schemes: the low-level state machines for partition switching, background flashing, verify-before-activate and automatic runtime fallback.\n\nUptane Client: Implement the on-device update client - metadata parsing and signature/threshold verification across the Root, Timestamp, Snapshot and Targets roles in constrained, statically allocated C; image transfer from the Primary over the platform's Ethernet middleware; staging to flash; the install → verify → activate → confirm/rollback state machine; delta application; and ECU version reporting - as an ASIL-D mandatory application under the platform's lifecycle manager. [SCOPE DECISION: the partial-verification Secondary is core scope; include the full-verification Primary client on the vehicle's central compute only if it stays in this team.]\n\nHardware-Enforced Isolation: Configure resource-domain controllers (NXP XRDC-class domain IDs, MDAC, PAC) and core MPUs across boot stages and the handoff to the application, to the isolation policy set by the Security Architect, and validate the resulting memory protections and security states in the lab.\n\nBandwidth & Storage Optimization: Implement delta application and compression-aware flash budgeting on embedded MCU flash to minimize bus bandwidth and program/erase cycles.\n\nDiagnostic Reprogramming: Implement the diagnostic reprogramming entry (security access, transfer services) where OEM service processes require it, on the platform's transport, without importing an AUTOSAR diagnostic stack.\n\nDefensive Engineering: Harden the verification path against voltage and clock glitching, fault injection and side channels - redundant checks, constant-time comparisons, fail-closed defaults - and feed findings back into the threat model.\n\nDeterministic Firmware Development: Write high-performance, deterministic embedded C for bare-metal and RTOS targets with freedom from interference, using Python exclusively for host-side tooling such as secure payload wrapping and test automation.\n\nCertification Evidence: Produce the ISO 26262 work products for your components: requirements and design in the traceability system, unit and integration tests with structural coverage, static-analysis results, WCET and boot-timing evidence, and freedom-from-interference analysis between bootloader stages and the application.\n\nLow-Level Hardware Integration: Lead bring-up on bench EVKs and production silicon with JTAG/SWD debuggers, logic analyzers and oscilloscopes; integrate the boot chain with the safety SBC's watchdog and safe-state behavior; and make the Uptane path the deployment mechanism for the platform's hermetic CI.\n\nEngineering Leadership: Set the implementation pattern others follow, review the work of engineers who later join the boot/OTA area, and own the bench when it breaks.\n\nQualifications\nTenure: 15+ years of firmware engineering; expert-level C for bare-metal and RTOS targets.\n\nBootloader Authorship: Have personally written and shipped a bootloader on a Cortex-M or automotive MCU (S32K, AURIX/TriCore, RH850, STM32-class): the flash drivers, linker scripts, startup code and memory map were yours, not a vendor's. Linux/U-Boot-only experience does not meet this bar.\n\nVerified Boot & A/B: Have integrated cryptographic verification into a boot or update path - signature verification through an HSM/secure element or a crypto library, key handling, anti-rollback - and implemented A/B or dual-bank activation with a recovery path.\n\nOn-Target Update Agent: Have built or substantially owned a software-update agent for constrained embedded devices (vehicle strongly preferred): flash management, resumable transfer, verify-before-activate, rollback. Cloud or campaign-tooling-only experience does not meet this bar.\n\nCertification Evidence: ISO 26262 (or DO-178C / IEC 61508) work products as an author: MISRA C compliance, static analysis to zero deviations, requirements-based testing with structural coverage (MC/DC at the highest levels), and traceability tooling.\n\nBench Fluency: JTAG/SWD, logic analyzer, oscilloscope; reads schematics; works from the reference manual at register level.\n\nPreferred Qualifications\nSilicon: NXP S32K3 with HSE_B (key catalogs, secure boot, A/B swap); FS26-class safety SBC integration.\n\nOpen-Source Fingerprints: Uptane / TUF / aktualizr / MCUboot / SUIT - contributor rather than user.\n\nDelta Technology: bsdiff-class delta tooling and compression-aware flash budgeting on MCUs.\n\nToolchain: Safety-certified RTOS (PX5, SafeRTOS or similar) and hermetic build systems (Bazel).\n\nDiagnostics: UDS (ISO 14229) security access and reprogramming services ($27/$29, $34/$36/$37).\n\nNetworking & Middleware: Embedded pub/sub middleware (Zenoh / zenoh-pico, DDS) and automotive Ethernet (100BASE-T1, 10BASE-T1S).\n\nHardening: Fault-injection or side-channel countermeasure experience in a boot path.\n\nAssessor Exposure: Direct interaction with certification bodies (TÜV, exida, UL) during assessment.\n\nEducation: MS or PhD in Computer Engineering, Electrical Engineering or a related field.\n\nInterview Process\nApplication Review - Coding Test - 1st interview - 2nd interview - Offer Negotiation - Hiring\n\nThe screening procedures may vary depending on the position, schedule, or other circumstances.\nYou will be individually notified of the screening schedule and results via the email address provided in your application.\n\nCompensation\n$189,240 - $266,760\n\nAdditional Information\nIn accordance with fair hiring practices, do not include any personal information unrelated to your job qualifications (e.g., Social Security Number, family relations, marital status, age, photo, physical condition, place of birth, etc.) in your resume.\n\nAll documents must be submitted in PDF format and under 30MB in size.\n\nIf you experience issues uploading your resume, please send it along with the job posting URL to .\n\nWe strongly encourage applications from U.S. veterans and candidates eligible for employment preference under applicable laws.\n\nQualified individuals with disabilities are encouraged to apply and will receive consideration under the Americans with Disabilities Act (ADA).\n\n42dot does not accept unsolicited resumes and will not pay fees for any such submissions. Equal Opportunity Statement\n\n42dot is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.\n\n※ Please review the following information before applying.\nHow to work in 42dot, About 42dot Way →","description_format":"text","description_chars":8980,"description_truncated":false,"requirements":{"experience_years_min":15,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Autonomous Driving","Smart Mobility","Automotive Software"],"lifecycle":[{"event":"open","at":"2026-06-19T21:27:56Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":187500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.531,"p_room":0.28,"age_days":132,"expected_fill_days":43,"reasons":["conf:3","stale_co","urgency","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":266760,"is_top_pay":true},"html_url":"https://alion.io/job/42dot-sr-staff-firmware-engineer-secure-boot-real-time-platform","json_url":"https://alion.io/job/42dot-sr-staff-firmware-engineer-secure-boot-real-time-platform.json","meta":{"generated_at":"2026-10-31T00:26:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":685,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":256},"rest":"https://alion.io/mcp/rest/get_company?id=256"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2F42dot-sr-staff-firmware-engineer-secure-boot-real-time-platform"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2F42dot-sr-staff-firmware-engineer-secure-boot-real-time-platform"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2F42dot-sr-staff-firmware-engineer-secure-boot-real-time-platform"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/42dot-sr-staff-firmware-engineer-secure-boot-real-time-platform\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2F42dot-sr-staff-firmware-engineer-secure-boot-real-time-platform"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":35108}},{"tool":"search_jobs","arguments":{"company":"42dot.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":35108},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}