Platform Security Engineer, OpenBMC

Overview

Own server management firmware security for OpenBMC, covering production firmware and hardening against sophisticated adversaries.

What you'll do

• Design, build, and ship OpenBMC firmware and manageability features for x86 and Arm (including GPU) platforms using Yocto/OpenEmbedded.
• Build the management stack on DMTF/OCP standards including MCTP, PLDM, SPDM, Redfish, RDE, plus IPMI/KCS.
• Implement BMC-to-BIOS/host communications and manage thermal/fan/power using eSPI/LPC and PMBus.
• Harden the BMC firmware security posture with secure and measured boot, root of trust, and attestation (SPDM).
• Own authenticated update (PLDM FW Update) and rollback protection while reducing attack surface.
• Lead threat modeling, run secure design reviews, and coordinate vulnerability disclosure with vendors and upstream communities.
• Build verification tooling using static analysis, fuzzing, firmware extraction, and CI gating.

What you'll need

• OpenBMC/BMC firmware experience on x86 and/or Arm from bring-up through production with hands-on D-Bus/sdbusplus.
• Strong C/C++ and Python skills plus deep Linux user-space/kernel fundamentals.
• Yocto/OpenEmbedded proficiency.
• A security mindset applied to firmware (not bolted on afterward).
• Upstream contributions to OpenBMC, U-Boot, DMTF, or OCP.
• Knowledge of out-of-band and in-band management, relevant DMTF specs, and device interfaces.
• Knowledge of NIST firmware security guidelines, specifically SP 800-193 and 800-147/155.

Details

• Location-based hybrid policy: expected to be in one of the offices at least 25% of the time.
• Visa sponsorship is available in some cases.