Principal software engineer

• Experience: 10+ years
• Location: Noida
• Employment Type: Full‑time
• Team: Platform / Systems / Security Engineering

Role Summary

We’re looking for a Principal Software Engineer who combines deep systems expertise with security-first design . You will lead architecture and development across Linux kernel , boot loader , and user‑space middleware , building secure, reliable, and performant platforms that power our next-generation [products/platforms]. You’ll set technical direction, elevate engineering standards, mentor senior engineers, and partner with cross-functional stakeholders to deliver high-impact outcomes.

What You’ll Do

• •Design and implement security features in boot loader complementing secure boot, measured boot, and chain of trust .
• •Design and implement security features in Linux kernel features (e.g., device drivers, filesystems, networking stack, security modules).
• •Build and optimize user‑space middleware (e.g., IPC frameworks, OpenSSL, DPDK) leveraging Userspace drivers.
• •Implement and integrate security protocols (e.g., TLS 1.3, DTLS, IPsec, SSH,) and hardware-backed key management.
• •Drive threat modeling, secure design reviews, and code audits , ensuring compliance with best practices (e.g., ASLR, stack canaries, SELinux/AppArmor policies).
• •Lead performance and reliability engineering including profiling, tracing (ftrace, eBPF, perf), memory safety, and resource efficiency.
• •Define platform CI/CD for low-level software (artifact signing, SBOMs, reproducible builds, Yocto/Buildroot/DEB/RPM pipelines).
• •Mentor and grow engineers , guide technical roadmaps, and make pragmatic build/buy/OSS leverage decisions.
• •Collaborate with Design team, IP team, DevOps, product, and QA to meet functional, performance, and certification goals.

Qualifications (Required)

• •10+ years of professional experience in systems/embedded/platform engineering, including technical leadership at team or org scale.
• •Expert in C/C++ for systems-level development; nice to have proficiency in Rust for memory‑safe components.
• •Demonstrated depth in Linux kernel internals (at least two areas): drivers, MM, scheduler, net, filesystems, security modules (LSMs), eBPF.
• •Hands-on boot loader development and customization ( U‑Boot , GRUB , secure boot flows, measured boot, boot-time diagnostics).
• •Strong knowledge of security protocols and cryptography (TLS/IPsec, X.509/PKI, key exchange, HSM/TPM, secure storage, attestation).
• •Experience building user‑space middleware (IPC, service management with systemd , observability/logging, configuration frameworks).
• •Proficiency with Linux build systems and distributions for embedded/platform (Yocto/OpenEmbedded, Buildroot) or enterprise (Deb/RPM).
• •Proven ownership of architecture/design documents , RFCs, and shipping production-quality platform software.
• •Debugging mastery using kernel/user tools (kgdb, crash, perf, ftrace, strace, gdb, BPF tools) on real hardware/virtualized targets.

Nice to Have

• •Trusted execution & firmware: ARM TrustZone, OP‑TEE, Intel SGX/TDX, AMD SEV, TF‑A, UEFI, ACPI/Device Tree.
• •Virtualization & containers: KVM/QEMU, Kata Containers, cgroups, namespaces; container security (seccomp, SELinux/AppArmor).
• •Networking & storage: DPDK, SR-IOV, NVMe, RDMA, io_uring; high‑throughput low‑latency pipeline design.
• •Safety/security certifications: FIPS 140‑3 validation, Common Criteria, ISO 27001/21434, AUTOSAR, IEC 62443.
• •Secure software supply chain: artifact signing, SBOM (SPDX/CycloneDX), SLSA levels, reproducible builds.
• •Scripting/automation: Python, Bash; Bazel/CMake/Meson; advanced CI (GitHub Actions, GitLab, Jenkins, Buildkite).
• •Observability: eBPF tracing, LTTng, SystemTap, ETW analogs; production telemetry & fleet operations.
• •HW familiarity: SoC bring‑up, board support packages (BSP), JTAG, oscilloscopes, power/thermal profiling.

More information about NXP in India...

#LI-2734