About Axiado

Axiado is redefining how AI infrastructure gets secured and managed. Founded in 2019, we’re a fast-growing, well-funded team of over 180 people worldwide, building the Trusted Control/Compute Unit (TCU), a new class of semiconductor that integrates hardware security, real-time platform management, and AI-driven optimization. Our TCU-based Platform Efficiency Controller is shipping hardware that makes AI servers measurably more efficient, more secure, and more reliable, and we’re extending that foundation into a hardware-anchored management fabric that scales from a single board to the whole fleet.

Backed by strong funding and validated by commercial programs with Tier 1 industry leaders, Axiado has earned recognition through numerous industry awards, including the 2026 AI in Cybersecurity Innovation Award from TMCnet, a Diamond award for Zero Trust Solution of the Year at the 2026 Pinnacle Awards, and Gold at the 2026 Cybersecurity Excellence Awards for AI Security Solution, as well as being a finalist for the Start-Up to Watch Award from the Global Semiconductor Alliance. We’re small enough that every person’s work visibly shapes the company, and we look for people who want to build, not just execute. Every employee holds equity, meaning your work directly builds your stake in the company’s future, not just a paycheck. If you want to help define what comes next, let’s talk.

Job Description

We are seeking an experienced Principal Firmware Engineer to manage a talented team while remaining a highly hands-on technical contributor. You will lead the design, development, and optimization of highly secure embedded systems. The ideal candidate will have deep expertise in Secure Boot, attestation schemes such as SPDM, secure provisioning, cryptographic firmware signing, and key/certificate revocation mechanisms, alongside strong knowledge of RTOS, Linux kernels, device drivers, and bus protocols. This "player-coach" role requires exceptional problem-solving skills to diagnose and resolve complex hardware-security interactions, as well as the leadership abilities to guide, mentor, and manage a high-performing engineering team.

Key Responsibilities

Team Management & Hands-On Contribution: Lead, manage, and grow a team of firmware engineers while remaining a core individual contributor. Dedicate a significant portion of your time to writing code, conducting code reviews, and resolving low-level technical challenges.

Security Architecture & Boot Flow: Architect, develop, and optimize embedded software solutions with a primary focus on end-to-end platform security, including Secure Boot, hardware Root of Trust (RoT), and verified boot pipelines.

Protocols & Provisioning: Implement and manage attestation schemes such as SPDM for device authentication and remote measurement, alongside secure factory and field secure provisioning workflows.

Firmware Signing & Lifecycle Management: Design and maintain cryptographic firmware signing infrastructure, secure update pipelines, and robust revocation mechanisms (such as anti-rollback counters, key revocation lists, and certificate revocation).

Debugging & Security Analysis: Diagnose and resolve complex hardware/software and cryptographic failure modes using advanced debugging tools (JTAG, GDB, logic analyzers).

Cross-Functional Collaboration: Partner closely with security experts, hardware engineers, and system architects to define roadmaps and deliver scalable embedded security solutions, while contributing to open-source security standards or embedded projects.

Qualifications

Qualifications

Education: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cybersecurity, or a related field.

Experience: 20+ years of experience in embedded software development, featuring a strong foundational background in C/C++.

Team Leadership: Proven track record of managing and leading engineering teams while maintaining an active, hands-on role in software development and system architecture.
Security Expertise:
- Proven experience with Secure Boot, Root of Trust (RoT), and cryptographic security principles (symmetric/asymmetric cryptography, hashing, digital signatures).
- Hands-on implementation experience with attestation schemes such as SPDM for hardware authentication and platform measurement.
- In-depth knowledge of secure provisioning methodologies, HSM (Hardware Security Module) integration, and secure key storage.
- Robust understanding of firmware signing workflows and lifecycle revocation architectures (e.g., CRLs, embedded validation, fuse-based key revocation).
System Software & Hardware: Extensive experience with RTOS, Linux kernel, device drivers, and hardware bring-up using Board Support Packages (BSPs).
Protocols & Interfaces: Strong grasp of peripheral interfaces (SPI, I2C, UART, USB) and bus protocols (PCIe, Ethernet), with PCIe root port and SR-IOV knowledge being a strong plus.

Toolchains & Build Systems: Familiarity with Linux build frameworks such as Yocto and Buildroot, alongside low-level debugging via JTAG and GDB.

Preferred Domains: Experience with Baseboard Management Controllers (BMC) and hardware security accelerators.

Additional Information

Axiado is committed to attracting, developing, and retaining the highest caliber talent in a diverse and multifaceted environment. We are headquartered in the heart of Silicon Valley, with access to the world's leading research, technology and talent.

We are building an exceptional team to secure every node on the internet. For us, solving real-world problems takes precedence over purely theoretical problems. As a result, we prefer individuals with persistence, intelligence and high curiosity over pedigree alone. Working hard and smart, continuous learning and mutual support are all part of who we are.

Axiado is an Equal Opportunity Employer. Axiado does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of

qualifications

, merit, and business need.

Principal Firmware Engineer (Security)

Start with your email