Senior Technical Architect

Job Summary Pod 3 — SSG — Lead Pod / Track Pod 3 — SSG Role Title Lead — Security Software (TrustZone, Secure Boot & Crypto) Experience 8 – 10 years Primary Location Hyderabad, India (Transition phase); HCLTech Offshore Delivery Center thereafter Work Model Physical co-location at Hyderabad mandatory during Transition (Month 1–3) for knowledge transfer and hardware/lab access; delivery shifts to HCLTech's Offshore Delivery Center (ODC) from Shadow (Month 4–6) onward. Role Summary Own the System Software Group (SSG) layer sustenance — HAL abstraction and system services that bridge the kernel and application layers. Key Responsibilities • Own the secure boot chain and TrustZone-based platform security sustenance — chain of trust, image signing, and verified boot. • Maintain the Hardware Root of Trust (HRoT), including key provisioning, fusing, and certificate/lifecycle management. • Sustain cryptographic subsystems — AES engines, TRNG (True Random Number Generator), and related crypto acceleration. • Triage and resolve security-relevant defects — secure boot failures, TrustZone isolation issues, crypto/TRNG faults — across firmware and kernel layers. • Support security certification/assessment activities and vulnerability triage. • Own the security regression suite and mentor the pod's Senior Engineer. Must-Have Skills • 8–10 years embedded platform security engineering (secure boot, TrustZone/TEE, cryptography). • Secure boot / verified boot chain-of-trust implementation. • TrustZone architecture and isolation enforcement. • Applied cryptography — AES, TRNG, key management, HRoT/fusing. • Security debugging across firmware and kernel layers. Good-to-Have Skills • GlobalPlatform TEE APIs / OP-TEE Trusted Application development. • Security certification exposure (FIPS 140-3, PSA Certified, SESIP or similar). • Fuzzing, static analysis and secure SDLC tooling. • HSM-backed manufacturing signing infrastructure experience. Key Responsibilities Pod 3 — SSG — Lead Pod / Track Pod 3 — SSG Role Title Lead — Security Software (TrustZone, Secure Boot & Crypto) Experience 8 – 10 years Primary Location Hyderabad, India (Transition phase); HCLTech Offshore Delivery Center thereafter Work Model Physical co-location at Hyderabad mandatory during Transition (Month 1–3) for knowledge transfer and hardware/lab access; delivery shifts to HCLTech's Offshore Delivery Center (ODC) from Shadow (Month 4–6) onward. Role Summary Own the System Software Group (SSG) layer sustenance — HAL abstraction and system services that bridge the kernel and application layers. Key Responsibilities • Own the secure boot chain and TrustZone-based platform security sustenance — chain of trust, image signing, and verified boot. • Maintain the Hardware Root of Trust (HRoT), including key provisioning, fusing, and certificate/lifecycle management. • Sustain cryptographic subsystems — AES engines, TRNG (True Random Number Generator), and related crypto acceleration. • Triage and resolve security-relevant defects — secure boot failures, TrustZone isolation issues, crypto/TRNG faults — across firmware and kernel layers. • Support security certification/assessment activities and vulnerability triage. • Own the security regression suite and mentor the pod's Senior Engineer. Must-Have Skills • 8–10 years embedded platform security engineering (secure boot, TrustZone/TEE, cryptography). • Secure boot / verified boot chain-of-trust implementation. • TrustZone architecture and isolation enforcement. • Applied cryptography — AES, TRNG, key management, HRoT/fusing. • Security debugging across firmware and kernel layers. Good-to-Have Skills • GlobalPlatform TEE APIs / OP-TEE Trusted Application development. • Security certification exposure (FIPS 140-3, PSA Certified, SESIP or similar). • Fuzzing, static analysis and secure SDLC tooling. • HSM-backed manufacturing signing infrastructure experience. Skill Requirements Other Requirements