[外商] Lead/Principal Firmware Security Engineer (Server)

A leading technology organisation is seeking a Lead / Principal Firmware Security Engineer (Server) in Taiwan to define the security architecture and strategy for next-generation server platforms.

As the designated Security Subject Matter Expert (SME), you will serve as the technical authority on Platform Root of Trust (RoT), firmware security, and supply chain integrity. You will drive a comprehensive Security-by-Design approach, guide engineering teams in applying industry standards, and strengthen platform resilience against advanced cyber threats, including emerging quantum computing risks.

Key responsibilities:

Security Architecture & Strategy

• Architectural Authority: Define end-to-end secure boot flows and chain-of-trust hierarchies across BMC, BIOS, Root of Trust (RoT), and peripheral devices
• PQC Migration Strategy: Lead the strategic roadmap for Post-Quantum Cryptography (PQC) migration, assessing the impact of PQC algorithms (e.g., ML-KEM and ML-DSA) on boot time, memory requirements, and hardware accelerator utilisation in embedded environments
• Protocol Governance: Establish and guide the implementation of security protocols, including SPDM (Security Protocol and Data Model), MCTP, and PLDM, to support device attestation and secure communications

Risk Management & Compliance

• Threat Modelling: Lead detailed threat-modelling sessions for new platforms to identify attack surfaces and define appropriate mitigations
• Vulnerability Management: Lead product security efforts by assessing CVEs affecting OpenBMC and the Linux kernel, and drive remediation plans
• Standards Alignment: Ensure product architecture aligns with Trusted Computing Group (TCG) specifications, OCP Security standards, and FIPS 140-3 requirements

Leadership & Innovation

• Security Advocacy: Champion the adoption of memory-safe programming languages, such as Rust, and modern security practices throughout the firmware development lifecycle
• Open-Source Engagement: Represent the organisation in OpenBMC Security Working Groups and OCP Security projects, driving upstream contributions to enhance security
• Mentorship: Provide expert guidance to Lead and Senior Engineers across the BMC and RoT teams, reviewing critical security designs and code implementations

Candidate profile:

Education & Experience

• Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, or a related field
• 10+ years' experience in embedded security, platform security, or firmware architecture
• Proven track record of designing secure server platforms or embedded devices from concept through certification

Technical Expertise (Principal Level)

• Cryptographic Expertise: Deep understanding of cryptographic algorithms, including ECC, RSA, SHA, and AES, and their applications in hardware security technologies such as Trusted Platform Modules (TPMs), Hardware Security Modules (HSMs), and Hardware Root of Trust (RoT)
• Protocol Expertise: In-depth knowledge of SPDM (1.0, 1.1, and 1.2), MCTP, Cerberus architectures, and Trusted Computing Group (TCG) specifications
• Hardware Security: Strong knowledge of hardware security primitives and technologies, including Physical Unclonable Functions (PUFs), TrustZone, and SGX, as well as side-channel attack mitigation techniques

About this company:

A technology organisation specialising in product design and engineering across server platforms, embedded systems, and data-centre infrastructure. Its focus on collaboration, innovation, and continuous learning offers engineers the opportunity to solve complex challenges and contribute to next-generation computing solutions.

Keywords: Lead Firmware Security Engineer, Principal Embedded Security Engineer, Server Platform Security Architecture, Hardware Root of Trust and Secure Boot, Post-Quantum Cryptography (PQC)

What’s next:

Ready to secure next-generation server platforms? Apply now to shape firmware security and hardware Root of Trust architecture while tackling emerging cybersecurity challenges!