Sr. Staff Software Engineer, Device Firmware & Platform (NGFW) - NetSec

Overview

Senior Staff Software Engineer in the NGFW group building enterprise-managed devices and next-generation platforms, serving as the primary technical interface between PANW and hardware teams for platform firmware, cloud management agents and board bring-up.

What you'll do

• Own the device firmware platform, including kernel configuration, package management, and image build pipelines using partner SDKs.
• Maintain and extend the TPM cloud device agent for WebSocket/mTLS connections, ZTP onboarding, and telemetry reporting.
• Integrate the PANW SCM cloud agent into firmware for device registration, configuration sync, and Cortex telemetry export.
• Drive board bring-up for new device hardware generations, including bootloader, device tree, and peripheral initialization.
• Serve as the primary technical liaison to hardware teams for triaging issues and reviewing firmware drops.
• Own firmware signing and secure boot, establishing PANW co-signing on the partner secure boot chain.
• Maintain the device configuration schema and site template repository, synchronizing it with the controller API contract.

What you'll need

• Minimum of 5 years of embedded Linux firmware development.
• At least 3 years on open source firmware.
• Strong technical knowledge in computer architecture and systems engineering.
• Hands-on board bring-up experience, including U-Boot, device tree authoring, and peripheral driver integration.
• Experience building and maintaining cross-compile toolchains for ARM64 targets.
• Familiarity with cloud-agent architectures on embedded Linux, including WebSocket, mTLS, and JSON config push models.
• Practical partner engagement experience, including reading schematics and working off Board Support Packages (BSPs).
• BS/MS degree in Computer Science, Computer Engineering, or a related equivalent field.

Nice to have

• Open-source Linux kernel driver experience.
• Working knowledge of secure boot chains, firmware signing, and TPM integration.
• Strong experience in packet processing, parsing, and networking protocols across or networks.
• Experience in data plane forwarding and network processor programming.
• Experience in DPDK packet processing and performance tuning.

Details

• Office-based role in Bangalore, India (Bagmane Tech Park).
• Most teams work from the office full time, with flexibility when needed.
• Not eligible for immigration sponsorship.