Lead Engineer – Embedded Linux Platform (Yocto) & Cybersecurity

Role Overview

• Should have experience in the medical industry.
• Should have a sound understanding of patient monitoring systems, medical device safety, and healthcare regulatory requirements
• Should have expertise spanning Linux Kernel, BSP, Device Drivers, OSS, and Cybersecurity.
• Highly skilled technical specialist who can technically lead, analyse, plan, design, implement and validate cybersecurity activities.
• Specialist in long-term maintenance of a Yocto/OpenEmbedded-based Linux Platform that is applied across multiple medical devices.
• Develop and evolve a reusable Linux Platform as a common technology asset across multiple products.
• Analyse, design, implement and validating solutions to technical challenges related to Linux Kernel, BSP, Device Drivers, Cybersecurity, and OSS management.
• Should be able to dive into source code when necessary to perform defect analysis, performance optimization, vulnerability remediation, security patch integration, backporting, and platform upgrades, while independently making technical decisions.
• The role requires a hands-on technical Leader who solves technical problems directly rather than delegating technical decision-making to others.

Key Responsibilities

1. Linux Platform Ownership

Define the technical strategy and roadmap for a common Yocto/OpenEmbedded-based Linux Platform and lead its deployment, maintenance, and evolution across multiple products.

• Develop the Linux Platform roadmap
• Develop Yocto release strategies
• Plan platform upgrades
• Select and manage OSS components
• Define common platform architecture
• Promote platform standardization across products
• Provide technical support and training for Kernel, BSP, Device Driver, and Security domains2. BSP / HAL Development

Provide technical leadership for Linux enablement on new hardware platforms.

• Board Support Package (BSP) development
• Hardware Abstraction Layer (HAL) development
• Device Tree development
• Bootloader development and maintenance
• Linux Device Driver development
• Board Bring-up
• Hardware and software integration3. Linux Kernel Engineering
• Kernel Porting
• Kernel Configuration
• Driver Integration
• Performance Optimization
• Real-time Linux implementation
• Kernel Security Hardening4. Linux Platform Cybersecurity

Lead cybersecurity activities related to the Linux Kernel, BSP, OSS, and third-party packages throughout the product lifecycle.

• Continuous monitoring of CVEs
• Vulnerability Assessment
• Security patch integration and verification
• Backporting security patches, including support beyond EOS
• Threat Analysis
• Security Risk Mitigation
• Collaboration with Product Security, PSIRT, QA, and Regulatory Affairs (RA)Ownership
• Linux Kernel Security
• OSS Security
• Third-party Package Security
• Product Security Maintenance5. SBOM & OSS Governance

Establish and maintain an OSS governance framework.

• Software Bill of Materials (SBOM) management
• OSS license management
• Development of OSS usage policies
• OSS compliance activities
• Open Source reviewsDeliverables
• Product- and platform-level SBOMs
• Management records of OSS components, versions, patches, and licenses
• OSS compliance reports
• Vulnerability status reports
• Records of vulnerability remediation activities and residual risk assessments6. Platform Sustainment

Take ownership of Linux Platform maintenance following product release.

• Long-term support planning
• Platform maintenance
• Security updates
• Package upgrades
• Defect investigation
• Customer escalation support7. Development Process & Automation

Promote automation of development, validation, and release processes to improve quality, reproducibility, traceability, and maintainability of the Linux Platform.

• CI/CD infrastructure development
• Automated build environment implementation
• Introduction of automated testing
• Quality metrics improvement
• Configuration & Release Management
• Traceability & Development MetricsTools
• GitHub
• GitHub Actions
• Docker
• ARTIFACTORY
• Jira
• Coverity
• Jama or equivalent requirements management tools

Qualifications & Requirements

Qualification: Bachelor’s degree in Engineering, Computer Science, Information Technology, or a related field.

Experience

• Minimum 10 years of embedded linux development experience along with 5 years or more of Yocto/Open Embedded experience, strong experience in BSP, Linux kernel development, Linux device driver development, C/C++ software development, GitHub, board bring-up and hardware/software integration on physical hardware, root cause analysis of complex technical problem and defining technical strategies as a technical leader.

Security

• Product cybersecurity experience
• Secure Boot
• TPM
• Trusted Execution Environment (TEE)
• Security Hardening
• Threat Modeling
• SBOM and vulnerability management
• Security patching and backporting
• Secure update / OTA update mechanisms
• Experience conducting penetration testing or implementing mitigations based on testing results

Medical Device

• IEC 62304
• ISO 14971
• IEC 81001-5-1
• FDA Cybersecurity Guidance
• FDA Submission / 510(k) experienceModern Embedded Development / DevSecOps
• Experience building reproducible build environments using Docker
• Experience with GitHub Actions or equivalent CI/CD platforms
• DevSecOps
• Static Analysis
• Software Composition Analysis
• Automated Security Scanning
• Artifact Management
• Automated TestingTechnical Skills
• Linux Kernel Internals
• Yocto Build System
• BitBake
• U-Boot
• Device Tree
• Cross-compilation toolchains
• Embedded debugging
• Linux boot process
• C/C++ and Shell scripting
• Fundamental knowledge of ARM-based SoCs