Software Engineer, Device Management

• About Rivet
• Rivet is an American company building integrated task systems — fusing hardened hardware with software, sensors, AI, and networking — for industrial workforces and defense personnel. We create capabilities that multiply the effectiveness of every individual and withstand the world’s toughest environments.

We serve the people who build, operate, maintain, and defend our way of life. From technicians and engineers to first responders and service members, they embody the hard work, ingenuity, and meritocratic values that drive Western prosperity. Yet too often they are forced to rely on outdated tools that fail under modern pressures. Rivet exists to reset that priority.

At Rivet, you’ll join a mission-driven team that fuses disciplines to deliver decisive outcomes where they matter most. Whether shaping our technology, strengthening our partnerships, or building our culture, every role here contributes to equipping the front lines with the modern systems they deserve.

Work Authorization Requirement: Due to the nature of our business and compliance with federal regulations, all candidates must be a "U.S. Person". Upon hire, you will be required to provide documentation verifying your status as a U.S. Citizen, a lawful permanent resident, or a protected individual under 8 U.S.C. 1324b(a)(3).

Summary

Help build the foundation of Rivet’s device platform: the secure OS layer and lightweight host services that manage our hardware in the field. This role sits at the intersection of systems engineering, security architecture, and embedded infrastructure. You’ll own core pieces of the stack and design with compliance and reliability in mind.

Responsibilities

Design and maintain low-level Android/Linux platform code: AOSP customizations, system services, HALs, and kernel-level integration

Build lightweight host services for device communication, policy distribution, and telemetry

Ship secure device management end to end: enrollment, provisioning, attestation, policy enforcement, and over-the-air updates

Define and enforce secure software and system configurations across the device fleet

Build and manage secure, reproducible environments: certificate signing, sandboxing, and runtime hardening

Integrate with the third-party MDM systems some of our customers deploy

Align deployment practices to regulatory and high-assurance frameworks

Act as a key owner across the stack, shipping pragmatic, secure, well-documented systems that scale

Requirements

5+ years building Android system-level code (AOSP, custom ROMs, HALs, system services, etc.)

Strong Linux systems programming experience and proficiency in Go or a similar modern systems language

Practical experience with MDM/EMM systems: secure enrollment, device posture, and policy enforcement

Familiarity with secure boot, TPM, certificate chains, attestation, and other low-level security primitives

Experience building hardened Android images for regulated or high-assurance deployments

Working understanding of containerization and sandboxing on Linux or Android

HTTP API design and implementation

BS in CS, CE, or equivalent demonstrated experience

Preferred Qualifications

Device Owner / Device Policy Controller experience on Android (DPM APIs, COSU/COPE, managed profiles)

Familiarity with third-party MDM/EMM stacks (eg. Intune, Omnissa), Android Enterprise, and server-side integration APIs

SELinux policy authoring

Protobuf and code-generation pipelines

Cross-compile and static ARM64 builds; Yocto; AOSP device-tree

C++ at the NDK or vendor-SDK level

Security-first mindset with experience hardening real-world systems in regulated environments

Compensation may vary within the posted range based on relevant experience, skills, education, and other job-related factors. In addition to base salary, this role may be eligible for equity and other forms of compensation. Eligible employees also receive a competitive benefits package, including unlimited PTO.

Rivet is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable law. Certain roles may require U.S. Person status, security clearance eligibility, or other requirements imposed by law or government contract.