Edge Software & Security Engineer
Bloom Energy · BT Park
Role Summary
Design and build the software foundations that power secure, scalable edge platforms. This role combines edge software skills, platform development, and secure by design strategies to ensure devices can be deployed, updated, managed, and trusted throughout their lifecycle.
Key Responsibilities
- Design and develop edge platform services, frameworks, and tooling for embedded and edge environments
- Build secure-by-design platform capabilities including secure boot, cryptographic services, trusted storage, and device identity
- Design and implement resilient OTA update systems for firmware, operating systems, and edge applications
- Develop device lifecycle management capabilities including provisioning, onboarding, configuration management, and retirement
- Implement supply chain security controls including firmware signing, SBOM generation, artifact provenance, and build integrity
- Build and secure CI/CD pipelines, developer workflows, and software delivery toolchains for edge platforms
- Integrate TPMs, TEEs, and secure elements to establish hardware-rooted trust
- Implement device attestation, integrity validation, and remote trust verification mechanisms
- Develop automation, observability, diagnostics, and fleet management capabilities for large-scale edge deployments
- Partner with hardware, firmware, cloud, and product teams to define platform architecture, security requirements, and threat models
Requirements
- 10+ years of experience in edge, embedded, platform, or security engineering
- Strong software development experience in Python, Go, C/C++, or Rust
- Experience building software for optimized containerized apps, embedded Linux, or edge computing environments
- Hands-on experience with secure boot, TPMs, secure elements, key management, and hardware-rooted trust
- Knowledge of OTA update architectures, software packaging, and fleet deployment strategies
- Experience implementing secure software supply chains, code signing, SBOMs, and artifact provenance
- Familiarity with containerized edge workloads and orchestration technologies
- Understanding of device identity, attestation, lifecycle management, and zero-trust principles
- Familiarity with operating CI/CD pipelines and modern SDLC practices
- Proficiency with Git and familiarity with Jira, Confluence, and collaborative engineering workflows
Preferred Qualifications
- Experience with Kubernetes, K3s, Talos Edge, KubeEdge or similar edge orchestration platforms
- Experience developing platform SDKs, APIs, and developer tooling
- Familiarity with confidential computing, trusted execution environments, or remote attestation services
- Exposure to managing large-scale fleets of connected devices
- Knowledge of cloud-to-edge architectures and hybrid deployment models