BootROM & Security Lead - RISC-V MPU

Job Title

BootROM & Security Lead - RISC-V MPU

Role Summary

Lead development of secure boot and Root of Trust (RoT) software for a 64-bit RISC-V application-class MPU SoC used in Linux-based systems. The role sits on the Platform Software team and partners with architecture, hardware, and SoC teams to define, implement, validate, and document the boot and platform security stack across pre-silicon, FPGA, and first-silicon bring-up.

Deliver production-quality BootROM/firmware, bootflow enablement, OS-level security integration, validation tests, and SDK collateral required for product releases.

Experience Level

Senior — typically 5+ years of experience in low-level firmware/boot software and Root of Trust development on SoCs.

Responsibilities

Primary responsibilities include designing, implementing, validating, and documenting secure boot and platform security features across development stages.

• Design, implement, and maintain a production-quality secure boot and Root of Trust stack for a 64-bit RISC-V MPU platform (BootROM/FSBL, handoff to firmware/bootloader).
• Enable and harden early platform initialization and bootflow (BootROM, U-Boot, OpenSBI/firmware handoff as applicable).
• Drive OS-level security enablement: kernel/BSP integration, Device Tree updates, reserved memory regions, firmware interfaces, and secure/non-secure boundary definitions.
• Develop and debug platform security components and drivers (crypto accelerators, key services, secure storage, lifecycle/provisioning, anti-rollback, attestation hooks).
• Create validation tests and perform pre- and post-silicon validation on FPGA and first silicon; root-cause boot, crypto, isolation, and lifecycle issues across HW/FW/kernel.
• Produce developer-facing collateral for SDK releases: integration notes, bring-up/debug guidance, known issues, and release-readiness documentation.

Requirements

Must-have technical skills and experience for immediate contribution.

• Expert-level C programming and the ability to read and modify low-level firmware and kernel-adjacent code.
• Strong Linux internals knowledge: boot flow, MMU/memory basics, privilege/isolation concepts, and system-level debugging.
• Hands-on SoC/platform bring-up experience and a strong ownership mindset for boot-stack and security quality.
• Experience with U-Boot, Linux kernel, Device Tree, and Yocto/OpenEmbedded or equivalent build systems.
• Proficiency with debugging tools: GDB plus one or more of OpenOCD/JTAG, Lauterbach, or similar debuggers.
• Experience validating on FPGA, emulation, or early-silicon platforms for bring-up and debug.

Nice-to-have:

• RISC-V (RV64) security experience or familiarity with application-class CPU security architectures (e.g., ARM TrustZone/EL3).
• Experience with OpenSBI, secure monitor/firmware layers, early-boot isolation mechanisms (PMP/sPMP/IOPMP), CI/CD and automated validation frameworks.
• Background in pre-silicon/FPGA validation or post-silicon debug and triage for boot/security issues.

Education Requirements

B.E./B.Tech or M.E./M.Tech in Computer Engineering, Electrical/Electronics Engineering, or a related field.

About the Company

Company: GlobalFoundries

Headquarters: Saratoga Springs, New York, USA

GlobalFoundries is a leading contract manufacturer for the global semiconductor industry, with facilities in multiple countries, including the USA. The company develops a broad portfolio of semiconductor technologies and employs around 13,000 people worldwide. GlobalFoundries focuses on enhancing competitiveness in specialized application solutions and fostering innovation in mobile communications, consumer electronics, and automotive applications.