Principal software engineer

expertise with security-first design. You will lead architecture and development across Linux kernel, boot loader, and user‑space middleware, building secure, reliable, and performant platforms that power our next-generation [products/platforms]. You’ll set technical direction, elevate engineering standards, mentor senior engineers, and partner with cross-functional stakeholders to deliver high-impact outcomes. What You’ll Do Design and implement security features in boot loader complementing secure boot, measured boot, and chain of trust. Design and implement security features in Linux kernel features (e.g., device drivers, filesystems, networking stack, security modules). Build and optimize user‑space middleware (e.g., IPC frameworks, Open SSL, DPDK) leveraging Userspace drivers. Implement and integrate security protocols (e.g., TLS 1.3, DTLS, IPsec, SSH,) and hardware-backed key management. Drive threat modeling, secure design reviews, and code audits, ensuring compliance with best practices (e.g., ASLR, stack canaries, SELinux/App Armor policies). Lead performance and reliability engineering including profiling, tracing (ftrace, e BPF, perf), memory safety, and resource efficiency. Define platform CI/CD for low-level software (artifact signing, SBOMs, reproducible builds, Yocto/Buildroot/DEB/RPM pipelines). Mentor and grow engineers, guide technical roadmaps, and make pragmatic build/buy/OSS leverage decisions. Collaborate with Design team, IP team, Dev Ops, product, and QA to meet functional, performance, and certification goals. Qualifications (Required) 10+ years of professional experience in systems/embedded/platform engineering, including technical leadership at team or org scale. Expert in C/C++ for systems-level development; nice to have proficiency in Rust for memory‑safe components. Demonstrated depth in Linux kernel internals (at least two areas): drivers, MM, scheduler, net, filesystems, security modules (LSMs), e BPF. Hands-on boot loader development and customization (U‑Boot, GRUB, secure boot flows, measured boot, boot-time diagnostics). Strong knowledge of security protocols and cryptography (TLS/IPsec, X.509/PKI, key exchange, HSM/TPM, secure storage, attestation). Experience building user‑space middleware (IPC, service management with systemd, observability/logging, configuration frameworks). Proficiency with Linux build systems and distributions for embedded/platform (Yocto/Open Embedded, Buildroot) or enterprise (Deb/RPM). Proven ownership of architecture/design documents, RFCs, and shipping production-quality platform software. Debugging mastery using kernel/user tools (kgdb, crash, perf, ftrace, strace, gdb, BPF tools) on real hardware/virtualized targets. Nice to Have Trusted execution & firmware: ARM Trust Zone, OP‑TEE, Intel SGX/TDX, AMD SEV, TF‑A, UEFI, ACPI/Device Tree. Virtualization & containers: KVM/QEMU, Kata Containers, cgroups, namespaces; container security (seccomp, SELinux/App Armor). Networking & storage: DPDK, SR-IOV, NVMe, RDMA, io_uring; high‑throughput low‑latency pipeline design. Safety/security certifications: FIPS 140‑3 validation, Common Criteria, ISO 27001/21434, AUTOSAR, IEC 62443. Secure software supply chain: artifact signing, SBOM (SPDX/Cyclone DX), SLSA levels, reproducible builds. Scripting/automation: Python, Bash; Bazel/CMake/Meson; advanced CI (Git Hub Actions, Git Lab, Jenkins, Buildkite). Observability: e BPF tracing, LTTng, System Tap, ETW analogs; production telemetry & fleet operations. HW familiarity: So C bring‑up, board support packages (BSP), JTAG, oscilloscopes, power/thermal profiling. More information about NXP in India... #LI-2734 NXP Semiconductors N.V. (NASDAQ: NXPI) enables a smarter, safer, and more sustainable world through innovation. As the world leader in secure connectivity solutions for embedded applications, NXP is pushing boundaries in the automotive, industrial & Io T, mobile, and communication infrastructure markets. For more information, visit www.nxp.com Bright Minds. Bright Futures. We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills. Commitment At NXP. We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year-on-year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality. Thank you for considering a career at NXP. To help you prepare for the different steps in our hiring process, see the following useful advice and tips. Are you already an NXP employee? Do not apply here. Instead, you must apply via our internal career page. Thank you for your interest in supporting our recruitment efforts. Please note that NXP operates under a strict Preferred Supplier List (PSL) for all recruitment activities. Any candidate profiles or resume submitted without a prior written agreement or explicit request from our Talent Acquisition team will be considered unsolicited. Such submissions will be deemed free of any obligations, and no fees will be paid by NXP or any of its affiliates, subsidiaries, or divisions - regardless of whether the candidate is hired, either coincidentally or otherwise. Thank you for your understanding.