Job Description:
We are looking for aPlatform Security Architectto help shape the security architecture of next-generation data center platforms.
This role focuses on how security is integrated into systems above the silicon, spanning firmware, boot chains, management planes, and platform lifecycle controls.
You will collaborate closely with hardware and firmware teams to help ensure the platform has a coherent and resilient security architecture from board to rack scale.
The role requires strong experience infirmware security architecture, applied cryptography, and system-level threat modelling.
Responsibilities:
- Platform Security Architecture : Design the security architecture for board and rack platforms, including: Extension of root of trust beyond the SoC, Secure and measured boot chains, Firmware signing and verification architecture, Device identity and provisioning models, Debug and lifecycle security mechanisms.
- Platform Threat Modeling : Create and maintain the end-to-end platform threat model covering : Firmware and boot chains, Management plane components (BMC, controllers) Rack-level attack paths.
- Design and help evolve the cryptographic foundations of the platform, including: Firmware signing hierarchy, Key ownership and trust anchors, Certificate and device identity models, Key rotation and revocation strategies.
- Firmware Security Requirements. Work closely with firmware teams to define and assess security mechanisms for BIOS, BMC, and device firmware.
Required Skills and Experience:
- Experience designingfirmware or platform security architectures
- Deep understanding ofsecure boot chains and firmware trust models
- Experience designingfirmware signing systems and key hierarchies
- Experience designingsecure firmware update mechanisms for platform firmware such as BIOS, BMC, or device firmware, including rollback protection and recovery flows
- Experience with security architectures forplatform management firmware (e.g., BMC or similar controllers)
- Experience designing platform trust architectures usinghardware roots of trust(e.g., TPM, DICE, secure elements)
- Solid understanding ofapplied cryptography in systems(signing, certificates, key hierarchies)
- Working knowledge ofLinux security fundamentals
Nice To Have Skills and Experience:
- Experience withBMC platformsor ecosystems such asOpenBMC
- Experience working withPCIe or other device firmware ecosystems
- Familiarity withsecure manufacturing and provisioning flows, including device identity injection or key provisioning
- Experience reviewing or designingfirmware security testing or validation strategies
Please note that a relocation package (including visa sponsorship support) is available for this role, for candidates who require it.
Accommodations at Arm:
At Arm, we want to build extraordinary teams. If you need an adjustment or an accommodation during the recruitment process, please email accommodations@arm.com. To note, by sending us the requested information, you consent to its use by Arm to arrange for appropriate accommodations. All accommodation or adjustment requests will be treated with confidentiality, and information concerning these requests will only be disclosed as necessary to provide the accommodation. Although this is not an exhaustive list, examples of support include breaks between interviews, having documents read aloud, or office accessibility. Please email us about anything we can do to accommodate you during the recruitment process.
Hybrid Working at Arm:
Arm’s approach to hybrid working is designed to create a working environment that supports both high performance and personal wellbeing. We believe in bringing people together face to face to enable us to work at pace, whilst recognizing the value of flexibility. Within that framework, we empower groups/teams to determine their own hybrid working patterns, depending on the work and the team’s needs. Details of what this means for each role will be shared upon application. In some cases, the flexibility we can offer is limited by local legal, regulatory, tax, or other considerations, and where this is the case, we will collaborate with you to find the best solution. Please talk to us to find out more about what this could look like for you.
Equal Opportunities at Arm:
Arm is an equal opportunity employer, committed to providing an environment of mutual respect where equal opportunities are available to all applicants and colleagues. We are a diverse organization of dedicated and innovative individuals, and don’t discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
#J-18808-Ljbffr…