Senior Software & Security Architect- Embedded Cybersecurity Platform

Role Description

At AURA Technologies, we are excited to announce a new opening for a dedicated security architect in our dynamic team. You will lead the implementation of a new embedded cybersecurity platform. You will translate detailed security specifications into implementation-level designs and working code for a hardened Intel/Linux appliance deployed in air-gapped OT environments.

This is a greenfield implementation. You will be writing the most security-sensitive components of the system from the ground up, including:

• Cryptographic key management services with hardware-rooted trust
• Certificate lifecycle management for offline and network-constrained environments
• Secure boot chain and platform integrity verification
• OS-level hardening and mandatory access control configuration
• Integration with hardware security elements and platform trust anchors

You will work directly with the Chief Architect (PhD, Computer Science, 25+ years in systems and security) and will be instrumental in building out the engineering team, helping recruit, mentor, and establish the technical practices for the developers who will maintain and extend your work.

Qualifications

• Embedded Linux: Deep, hands-on experience with custom embedded Linux systems including kernel configuration, initramfs, systemd, disk encryption, and mandatory access controls (SELinux or AppArmor).
• TPM 2.0 and hardware root of trust: Working experience with TPM-based security including secure boot, measured boot, platform integrity, key sealing, and attestation.
• Air-gapped and OT environments: Experience designing or deploying systems in disconnected, high-assurance, or industrial control environments.
• PKI and X.509: Substantive experience with public key infrastructure including certificate chains, validation, revocation, and certificate profiles.
• Systems programming: Strong proficiency in C or C++ for systems-level work.
• US Citizenship and ability to pass a background investigation.

Requirements

• Highly Desirable: Rust - Production experience writing Rust for systems or embedded targets.
• Cryptographic engineering: Practical experience with cryptographic libraries (OpenSSL, tpm2-tss, PKCS#11), secure protocol implementation, or hardware security module integration.
• OT security standards: Familiarity with security standards applicable to industrial and critical infrastructure environments (e.g., IEC 62443, NIST 800-82, or equivalent).

• Not Required: Security clearance (none needed for this role)
• Cloud or SaaS experience
• Web application security
• CISSP or similar management-oriented certifications

What You Will Not Be Doing

• Administering PKI infrastructure (separate role)
• Cloud architecture or DevOps
• Penetration testing or red-teaming (though your threat modeling instincts will be valued)
• Front-end or UI development

Why This Role

• Greenfield architecture: You are building from a clean sheet, not maintaining legacy code.
• Genuinely hard problems: Hardware-rooted key management, tamper-responsive security, and certificate lifecycle in offline environments.
• Research culture: AURA is an R&D company. Engineers are encouraged to champion research directions they are passionate about.
• Autonomy and ownership: As the first security-focused developer on this platform, you will shape the implementation approach, tooling, and technical culture for the team that follows.

Benefits

• Fortune 500-level Health Care Coverage
• Unlimited Leave Program after 60 days
• 10 Paid holidays & Paid Winter Break
• 401(k) Safe Harbor Contributions
• Employee Discount Program