Axiado

Sr. Staff Firmware Engineer - Platform Firmware Resiliency (PFR)

San Jose, CA, United States · On-site · Full-time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerAxiado
LocationSan Jose, CA, United States
Work styleOn-site
Employment typeFull-time
Employer posted5 months ago

We are seeking an experienced Sr. Staff Firmware Engineer with deep expertise in Platform Firmware Resiliency (PFR) standard to lead the design, development, and optimization of secure firmware solutions that meet the required compliance standards. The ideal candidate will have hands-on experience with TPM, Firmware Signing, Attestation, and Root of Trust, and will be responsible for designing, implementing, and maintaining robust security solutions to protect hardware, firmware, and software integrity.

Key Responsibilities:

Own PFR architecture and implementation for multiple product lines.

Design and develop secure firmware modules that implement protections for BIOS, FPGA, BMC, and other critical platform firmware.

Integrate and validate hardware root-of-trust solutions (e.g., Intel PFR, TPM, cryptographic accelerators).

Implement firmware recovery mechanisms to restore integrity after detection of corruption or compromise.

Show full description

Perform threat modeling and risk assessments specific to firmware-level attacks.

Develop test strategies for validating PFR capabilities, including attack simulation and penetration testing.

Ensure compliance with NIST SP 800-193 and relevant platform security guidelines.

Collaborate with cross-functional teams (hardware, BIOS, security, cloud) to ensure seamless integration of PFR features.

Mentor engineers in firmware security principles, secure coding practices, and resiliency design patterns.

Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, or related field.

20+ years of experience in embedded software development, with a strong background in C/C++.

Strong understanding of Platform Firmware Resiliency concepts and NIST SP 800-193 requirements.

Experience with secure boot, measured boot, and cryptographic verification of firmware.

Familiarity with UEFI/BIOS architecture, BMC firmware, and FPGA firmware update flows.

Hands-on experience with hardware root-of-trust solutions (e.g., Intel PFR, TPM 2.0).

Strong debugging skills, including use of JTAG, logic analyzers, and protocol analyzers.

Experience with Intel Server Platform Services (SPS) or similar management engines is a plus.

Familiarity with secure firmware update protocols (e.g., capsule updates, signed images).

Knowledge of supply chain security for firmware components.

Compensation Range - $80,000 - $200000

Axiado is committed to attracting, developing, and retaining the highest caliber talent in a diverse and multifaceted environment. We are headquartered in the heart of Silicon Valley, with access to the world's leading research, technology and talent.

We are building an exceptional team to secure every node on the internet. For us, solving real-world problems takes precedence over purely theoretical problems. As a result, we prefer individuals with persistence, intelligence and high curiosity over pedigree alone. Working hard and smart, continuous learning and mutual support are all part of who we are.

Axiado is an Equal Opportunity Employer. Axiado does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.