BootROM & Security Lead - RISC-V MPU

Key Responsibilities

• Secure boot & RoT development: design, implement, and maintain a production-quality secure boot and Root of Trust stack for a 64-bit RISC-V MPU platform.
• Enable and harden the boot and firmware stack (boot flow, early platform initialization, BootROM/FSBL, U-Boot, OpenSBI/firmware handoff as applicable).
• Drive OS-level enablement for security: kernel/BSP integration, Device Tree updates, reserved memory regions, firmware interfaces, and secure/non-secure boundary definitions.
• Develop and debug platform security components and drivers (crypto accelerators, key services, secure storage, lifecycle/provisioning flows, anti-rollback, and attestation hooks as applicable).
• Deliver security collateral as part of SDK releases: integration, validation, and developer-facing documentation (bring-up/debug notes, known issues, and release readiness).
• Pre- & post-silicon validation (AVV): create tests, validate on FPGA/first silicon, and root-cause issues across HW/FW/kernel (boot, crypto, isolation, and lifecycle).

Required Qualifications

• B.E./B.Tech or M.E./M.Tech in Computer Engineering, Electrical/Electronics Engineering, or a related field.
• Strong experience (typically 5+ years) in low-level firmware/boot software, secure boot, and Root of Trust development on SoCs.
• Expert-level C programming; comfortable reading low-level firmware and kernel-adjacent code.
• Strong Linux internals knowledge: boot flow, memory management/MMU basics, privilege/isolation concepts, and system-level debugging.
• Hands-on SoC/platform bring-up experience and ownership mindset for security and boot-stack quality.
• Hands-on with U-Boot, Linux kernel, Device Tree, and Yocto/OpenEmbedded (or equivalent build systems).
• Strong debugging skills with GDB and at least one of OpenOCD/JTAG, Lauterbach, or similar tools.
• Experience working on FPGA, emulation, or early-silicon platforms for bring-up/validation.

Good to Have

• RISC-V (RV64) security experience or strong exposure to other application-class CPU security architectures (ARM TrustZone/EL3, etc.).
• Background in pre-silicon/FPGA validation or post-silicon debug and triage for boot/security issues.
• Familiarity with platform security building blocks: secure boot, lifecycle/provisioning, secure storage, anti-rollback, attestation, and firmware/OS boundaries.
• Experience with OpenSBI, secure monitor/firmware layers, and early-boot isolation (PMP/sPMP/IOPMP or equivalents).
• Exposure to CI/CD and automated validation (test frameworks, dashboards, regressions) for boot/security quality.

What We Offer

• Build a secure boot and Root of Trust stack from the ground up and see it shipped in real products.
• End-to-end ownership across pre-silicon → FPGA → first silicon → production SDK releases.
• Work closely with architects and SoC teams; your validation data drives security decisions.
• Deep technical work, strong peer group, and long-term growth on a strategic platform.

GlobalFoundries is an equal opportunity employer, cultivating a diverse and inclusive workforce. We believe having a multicultural workplace enhances productivity, efficiency and innovation whilst our employees feel truly respected, valued and heard.

As an affirmative employer, all qualified applicants are considered for employment regardless of age, ethnicity, marital status, citizenship, race, religion, political affiliation, gender, sexual orientation and medical and/or physical abilities.

All offers of employment with GlobalFoundries are conditioned upon the successful completion of background checks, medical screenings as applicable and subject to the respective local laws and regulations.

Information about our benefits you can find here: https://gf.com/about-us/careers/opportunities-asia