Trusted Execution Environment (OP-TEE) Software Engineer

Morgan Philips

  • Hsinchu City
  • Permanent
  • Full-time
  • 1 month ago
Trusted Execution Environment (OP-TEE) Software Engineer
📍 Location: Hsinchu
👤 Level: Up to Staff📝 General Summary:Seeking a software engineer with solid experience in Trusted Execution Environments (TEEs) to develop and maintain OP-TEE secure services on ARM TrustZone-enabled SoCs.
This role includes:Secure world developmentIntegration with non-secure Linux kernelEnabling platform-specific secure firmware features🔧 Key Responsibilities:Develop and maintain platform-specific OP-TEE secure world componentsPort OP-TEE to new SoCs; enable secure services (key storage, crypto, secure boot attestation)Implement Trusted Applications (TAs) using OP-TEE internal and GlobalPlatform APIsIntegrate TEE with kernel drivers and user-space apps (via supplicant/syscall)Work with bootloaders (U-Boot, TF-A) for secure init, memory carveout, isolationOptimize cryptographic feature performanceDebug issues across secure/non-secure boundary (SMC, RPC, TA)Support security certifications and maintain traceabilityCollaborate with hardware/security/product teams for SoC-level secure featuresMay require occasional APAC/international travel✅ Minimum Qualifications:Bachelor’s/Master’s in EE, CS or related fieldStrong C programming and low-level embedded development experienceFamiliar with ARM TrustZone and secure/non-secure world architectureExperience with OP-TEE or other TEE frameworksUnderstanding of Linux kernel architecture and driver integrationExperience with bootloaders (U-Boot, TF-A) and secure boot processKnowledge of GlobalPlatform TEE specs (Client API, Core API)⭐ Preferred Qualifications:3+ years in embedded security or TEE-related developmentExperience porting OP-TEE or integrating secure IP (crypto engines, RPMB, fuses)Knowledge of secure boot, key provisioning, attestation, anti-rollbackFamiliar with secure peripherals (RTC, TRNG, fuse access)Familiar with hardware root of trust, secure storage, crypto libs (e.g., mbedTLS)Experience using TEE debugging tools (xtest, optee_client, TA tracing)Strong communication; ability to work with global cross-functional teams

Morgan Philips