Principal software engineer

Experience: 10+ years Location: Noida Employment Type: Full‑time Team: Platform / Systems / Security Engineering Role Summary We’re looking for a Principal Software Engineer who combines deep systems expertise with security-first design. You will lead architecture and development across Linux kernel, boot loader, and user‑space middleware, building secure, reliable, and performant platforms that power our next-generation [products/platforms]. You’ll set technical direction, elevate engineering standards, mentor senior engineers, and partner with cross-functional stakeholders to deliver high-impact outcomes. What You’ll Do - Design and implement security features in boot loader complementing secure boot, measured boot, and chain of trust. - Design and implement security features in Linux kernel features (e.g., device drivers, filesystems, networking stack, security modules). - Build and optimize user‑space middleware (e.g., IPC frameworks, OpenSSL, DPDK) leveraging Userspace drivers. - Implement and integrate security protocols (e.g., TLS 1.3, DTLS, IPsec, SSH,) and hardware-backed key management. - Drive threat modeling, secure design reviews, and code audits, ensuring compliance with best practices (e.g., ASLR, stack canaries, SELinux/AppArmor policies). - Lead performance and reliability engineering including profiling, tracing (ftrace, eBPF, perf), memory safety, and resource efficiency. - Define platform CI/CD for low-level software (artifact signing, SBOMs, reproducible builds, Yocto/Buildroot/DEB/RPM pipelines). - Mentor and grow engineers, guide technical roadmaps, and make pragmatic build/buy/OSS leverage decisions. - Collaborate with Design team, IP team, DevOps, product, and QA to meet functional, performance, and certification goals. Qualifications (Required) - 10+ years of professional experience in systems/embedded/platform engineering, including technical leadership at team or org scale. - Expert in C/C++ for systems-level development; nice to have proficiency in Rust for memory‑safe components. - Demonstrated depth in Linux kernel internals (at least two areas): drivers, MM, scheduler, net, filesystems, security modules (LSMs), eBPF. - Hands-on boot loader development and customization (U‑Boot, GRUB, secure boot flows, measured boot, boot-time diagnostics). - Strong knowledge of security protocols and cryptography (TLS/IPsec, X.509/PKI, key exchange, HSM/TPM, secure storage, attestation). - Experience building user‑space middleware (IPC, service management with systemd, observability/logging, configuration frameworks). - Proficiency with Linux build systems and distributions for embedded/platform (Yocto/OpenEmbedded, Buildroot) or enterprise (Deb/RPM). - Proven ownership of architecture/design documents, RFCs, and shipping production-quality platform software. - Debugging mastery using kernel/user tools (kgdb, crash, perf, ftrace, strace, gdb, BPF tools) on real hardware/virtualized targets. Nice to Have - Trusted execution & firmware: ARM TrustZone, OP‑TEE, Intel SGX/TDX, AMD SEV, TF‑A, UEFI, ACPI/Device Tree. - Virtualization & containers: KVM/QEMU, Kata Containers, cgroups, namespaces; container security (seccomp, SELinux/AppArmor). - Networking & storage: DPDK, SR-IOV, NVMe, RDMA, io_uring; high‑throughput low‑latency pipeline design. - Safety/security certifications: FIPS 140‑3 validation, Common Criteria, ISO 27001/21434, AUTOSAR, IEC 62443. - Secure software supply chain: artifact signing, SBOM (SPDX/CycloneDX), SLSA levels, reproducible builds. - Scripting/automation: Python, Bash; Bazel/CMake/Meson; advanced CI (GitHub Actions, GitLab, Jenkins, Buildkite). - Observability: eBPF tracing, LTTng, SystemTap, ETW analogs; production telemetry & fleet operations. - HW familiarity: SoC bring‑up, board support packages (BSP), JTAG, oscilloscopes, power/thermal profiling. More information about NXP in India... #LI-2734