BootROM & Security Lead - RISC-V MPU

Job Title

BootROM & Security Lead - RISC-V MPU

Role Summary

Lead design and delivery of secure boot and Root of Trust (RoT) for a 64-bit RISC-V application-class MPU SoC platform. Work in the Platform Software team to enable and harden boot/firmware stacks, partner with architecture and hardware teams, and validate security across pre-silicon, FPGA, and first-silicon stages.

Experience Level

Senior — typically requires 5+ years of experience in low-level firmware, secure boot, and SoC platform security.

Responsibilities

Primary responsibilities include implementing secure boot/RoT, enabling OS-level security, validating on early platforms, and producing developer-facing security artifacts.

• Design, implement, and maintain a production-quality secure boot and Root of Trust stack for a 64-bit RISC-V MPU platform.
• Harden the boot and firmware stack: boot flow, early platform initialization, BootROM/FSBL, U-Boot, OpenSBI/firmware handoff.
• Drive OS-level enablement: kernel/BSP integration, Device Tree updates, reserved memory regions, and secure/non-secure boundary definitions.
• Develop and debug platform security components and drivers (crypto accelerators, key services, secure storage, lifecycle/provisioning flows, anti-rollback, attestation hooks).
• Create tests and validate on FPGA and first silicon; root-cause boot/security issues across HW/FW/kernel.
• Produce security collateral for SDK releases: integration validation, bring-up/debug notes, known issues, and release readiness documentation.

Requirements

Must-have skills and experience.

• 5+ years in low-level firmware/boot, secure boot, and Root of Trust development on SoCs.
• Expert-level C programming; comfortable reading low-level firmware and kernel-adjacent code.
• Strong Linux internals knowledge: boot flow, memory management/MMU basics, privilege/isolation concepts, and system-level debugging.
• Hands-on SoC/platform bring-up experience and an ownership mindset for security and boot-stack quality.
• Practical experience with U-Boot, Linux kernel, Device Tree, and Yocto/OpenEmbedded or equivalent build systems.
• Strong debugging skills with GDB and at least one of OpenOCD/JTAG, Lauterbach, or similar tools.
• Experience working on FPGA, emulation, or early-silicon platforms for bring-up and validation.

Nice-to-have:

• RISC-V (RV64) security experience or strong exposure to other application-class CPU security architectures (ARM TrustZone/EL3).
• Familiarity with OpenSBI, secure monitor/firmware layers, and early-boot isolation primitives (PMP/sPMP/IOPMP or equivalents).
• Background in pre-silicon/FPGA validation or post-silicon debug and triage for boot/security issues.
• Exposure to CI/CD and automated validation for boot/security quality (test frameworks, dashboards, regressions).

Education Requirements

B.E./B.Tech or M.E./M.Tech in Computer Engineering, Electrical/Electronics Engineering, or a related field.

About the Company

Company: GlobalFoundries

Headquarters: Saratoga Springs, New York, USA

GlobalFoundries is a leading contract manufacturer for the global semiconductor industry, with facilities in multiple countries, including the USA. The company develops a broad portfolio of semiconductor technologies and employs around 13,000 people worldwide. GlobalFoundries focuses on enhancing competitiveness in specialized application solutions and fostering innovation in mobile communications, consumer electronics, and automotive applications.