Secure Manufacturing Engineer (Embedded Systems)

TL;DR

Secure Manufacturing Engineer (Embedded Systems): Designing and scaling secure manufacturing pipelines that provision hirify.global robots from bare boards into cryptographically enrolled, OTA-ready devices with an accent on device identity, factory security, and end-of-line validation. Focus on architecting provisioning stations, connecting embedded firmware with cloud identity systems, and preventing key leakage, firmware tampering, and supply-chain substitution.

Location: On-site in San Diego, California, United States

Salary: $260,000–$320,000 USD per year

Company

hirify.global develops commercially scalable and safe hirify.global robots, including the HMND-01 Alpha platform used in industrial pilots.

What you will do

• Architect hardware, software, and network stacks for secure factory provisioning stations using HSMs, key injection, AWS Private CA, and secure boot fuse programming.
• Build automated toolchains for device identity provisioning, firmware flashing, calibration, and functional testing.
• Connect device identities with cloud registries for OTA updates, heartbeating, and deployment tracking.
• Define end-of-line test specifications covering sensor calibration, actuator checks, secure boot verification, and initial OTA health.
• Translate security requirements into contract-manufacturer procedures and threat-model untrusted or semi-trusted facilities.
• Maintain chain-of-custody records linking serial numbers with identities, calibration data, test results, and firmware versions.

Requirements

• 10+ years of experience in embedded systems, device security, or manufacturing engineering, including at least 3 years in secure provisioning or secure manufacturing.
• Experience with X.509 certificate lifecycles, mTLS, device attestation, and AWS Private CA.
• Hands-on expertise with AWS S3, IAM, ECS, KMS, CloudHSM, and Secrets Manager.
• Experience defining manufacturing tests, building automated fixtures, and managing quality gates with contract manufacturers.
• Advanced Python or Bash skills and experience with embedded Linux, including NVIDIA Jetson Orin or Thor platforms.
• Understanding of secure boot chains, TPM or TrustZone, cryptographic key injection, certificate provisioning, eFuse programming, signed images, A/B partitioning, and air-gapped stations.

Culture & Benefits

• Comprehensive health, dental, and vision insurance for US-based employees.
• 23 accrued PTO days, separate sick leave, and paid company holidays.
• 401(k) retirement plan with employer matching.
• Equity participation and significant ownership of key initiatives.
• Daily catered lunch, snacks, and drinks in the office.
• Collaboration with engineers, researchers, and product experts in AI and robotics.