# Senior Platform Engineer, Embedded Linux & Security

**Company:** [Swan](https://zerogtalent.com/frontier-companies/swan)
**Location:** San Francisco
**Work mode:** On-site
**Seniority:** Senior
**Employment type:** Full Time
**Salary:** USD 175K–250K/yr
**Category:** Engineering
**Department:** Engineering
**Listed:** 2026-11-10

[View and apply on Zero G Talent](https://zerogtalent.com/frontier-jobs/swan/senior-platform-engineer-embedded-linux-security-eee21d5c-14d7-4616-8b77-309d9591b2ec)

## What you'll do

- Secure device provisioning and hardware-backed security
- Harden software release processes from source to device
- Design device authentication and authorization services
- Threat model platform and track vulnerabilities
- Build cloud pipelines for device data and identity

## What you need

- 6+ yrs Linux systems, security, and infrastructure engineering
- Hardware-backed security: secure boot, TPM, TEE, attestation
- Harden Linux devices, containers, and systemd services
- Edge and IoT security: verified boot, read-only rootfs
- Cloud infrastructure and CI/CD pipeline security

## Job description

### **Senior Platform Engineer, Embedded Linux & Security**

### **About the role**

  

This role secures embedded Linux devices and the infrastructure behind them, from boot and provisioning through release, deployment, and cloud services. You'll join a small engineering team as a senior individual contributor, working across device security, DevOps, and backend development.

  

### **What you'll do**

-   Work with and improve secure device provisioning and hardware-backed security, including fusing, signing, device identity, secure boot, attestation, and disk encryption.
    
-   Help define and harden software release processes from source to device.
    
-   Help design device authentication and authorization services.
    
-   Harden device images and container runtimes, including mandatory access control such as AppArmor or SELinux.
    
-   Run services with least privilege: systemd sandboxing, non-root accounts, and correct file ownership and permissions.
    
-   Set SSH and firewall policy, and close debug paths such as UART, JTAG, and USB recovery.
    
-   Secure web services on devices and in the cloud with TLS and mTLS, reverse proxies, and least-privilege service accounts.
    
-   Threat model the platform, help scope pentests, and track vulnerabilities.
    
-   Plan security for partner engagements and third-party integrations: define requirements, review interfaces and data flows, and set access boundaries.
    
-   Help shape fleet management and over-the-air update approaches, from device enrollment through deployment.
    
-   Build cloud pipelines for device data and identity, with least-privilege access scoped to each device.
    
-   Contribute to arm64 build and image pipelines, including cross-compilation, QEMU-based builds and tests, multi-arch containers, and rootfs customization.
    
-   Write and maintain backend code for device and infrastructure tooling.
    

  

### **What you bring**

-   6+ years of experience across Linux systems, security, and infrastructure engineering.
    
-   Strong working knowledge of hardware-backed security: secure boot chains, fused keys, TPMs and firmware TPMs, TEEs, attestation, and sealed storage.
    
-   Hands-on experience hardening Linux devices, containers, and services, with fluency in permissions, capabilities, and systemd.
    
-   Current knowledge of how to secure edge and IoT devices, such as A/B partitions, read-only root filesystems, and verified boot.
    
-   Confidence building and securing cloud infrastructure and CI/CD pipelines.
    
-   Solid coding skills for tooling and backend services, and the ability to review code for security issues.
    
-   Experience threat modeling systems and working with penetration testers or red teams.
    
-   A bias toward action: delivering on priorities with urgency, and proactively finding, raising, and fixing issues with the team along the way.
    

  

### **Nice to have**

-   Hands-on implementation of secure boot, key fusing, or attestation on embedded hardware
    
-   Hands-on implementation of secure OTA updates, including fleet update tools such as Mender
    
-   ML model security on edge devices: current risks and mitigations
    
-   Embedded pentesting or red team work: UART and JTAG access, firmware extraction, rollback and recovery-mode attacks
    
-   Cloud security depth: serverless, IAM policy design, key management, device identity
    
-   Infrastructure as code with tools such as Terraform or Ansible
    
-   C++, Python
    
-   Experience in defense, export-controlled, or CMMC-regulated environments
    
-   Experience in a small, fast-paced startup environment
    
-   Familiarity with corporate security and IT infrastructure

## Other open roles at Swan

- [Head of Partnerships](https://zerogtalent.com/frontier-jobs/swan/head-of-partnerships-4c61536f-28d4-4d2f-bb26-d3b2588dacaf) — United States
- [Business Development Lead](https://zerogtalent.com/frontier-jobs/swan/business-development-lead-33930e7b-ec43-41c2-8118-1c5ec675e47d) — United States
- [Forward Deployed Drone Technician](https://zerogtalent.com/frontier-jobs/swan/forward-deployed-drone-technician-519f64a9-c56b-45ea-ad91-bf124925b1ad) — San Francisco
- [Head of Growth](https://zerogtalent.com/frontier-jobs/swan/head-of-growth-4f1433df-38f3-481b-a7f1-b7bca4caf887) — United States
- [DSP / SDR Receiver Engineer — Navigation & Communications (Contract)](https://zerogtalent.com/frontier-jobs/swan/alt-pnt-research-engineer-cac547a6-1936-4bae-86ed-4f23281bdb29) — Remote

---
*Source: [Zero G Talent](https://zerogtalent.com), the job board for space, defense, AI, robotics and frontier-tech companies.*