Senior Secure Provisioning Software Engineer

Pracovní nabídka

Ready to join the future of innovation in our team at NXP?

You will join a team responsible for Secure Provisioning SDK (SPSDK), a unified Python‑based platform used across NXP’s MCU and application processor portfolio. SPSDK provides essential tooling for secure device provisioning, configuration, boot preparation, lifecycle control, and security‑critical operations, supporting devices from early prototyping through production deployment.

SPSDK is used not only by software developers, but also in automated CI environments, manufacturing, and customer production flows. The solutions you work on must therefore be robust, secure, auditable, and safe by design, as they directly interact with the most sensitive parts of the device such as bootloaders, ROM, keys, fuses, and lifecycle states.

In this senior role, you will take end‑to‑end ownership of selected parts of the SPSDK platform. You will design, implement, and evolve secure provisioning workflows, APIs, and command‑line tools, balancing security, usability, and long‑term maintainability, and taking responsibility for technical decisions within your area.

Your work will span multiple layers, including low‑level device communication, secure boot image preparation, cryptography and key management, lifecycle configuration, and Python‑based tooling and reusable APIs.

Your team

By joining our Czech team, you will become part of a high‑performance and enthusiastic software development team working on Secure Provisioning SDK (SPSDK).

The team operates in a friendly and dynamic work environment, while delivering solutions used in real production scenarios.

You will have the opportunity to collaborate with a wide range of NXP teams, including system and firmware teams, silicon and security experts, and product stakeholders, contributing to solutions that span from early development to manufacturing and customer deployment. The role offers strong exposure to cross‑functional collaboration, where feedback, discussion, and proposing technically sound solutions are part of everyday work.

The team values technical ownership, open communication, and shared responsibility. Engineers are encouraged to take initiative, think beyond their immediate tasks, and contribute to improving both the platform and the way the team works together.

Your responsibilities:

Take end‑to‑end technical ownership of selected parts of the Secure Provisioning SDK (SPSDK), including design, implementation, and long‑term maintenance.

Design and evolve secure provisioning, configuration, and device lifecycle workflows.

Develop and maintain Python‑based command‑line tools and reusable APIs, with a strong focus on robustness, security, and long‑term maintainability.

Enable reliable and secure interaction with devices at low level, including communication with boot ROMs and bootloaders.

Contribute to secure boot image preparation, cryptographic operations, and key, credential, and lifecycle state handling.

Independently make technical and security‑relevant decisions and take responsibility for their outcomes.

Collaborate with firmware, silicon, security architecture, and product teams, providing technical input and explaining trade‑offs.

Mentor less experienced engineers, review designs and implementations, and contribute to shared engineering best practices.

Your profile:

Strong background in software engineering, with experience building production‑grade tools or platforms.

Practical experience with secure boot, device provisioning, Root of Trust concepts, or device lifecycle security.

Solid experience with Python, used for developing robust command‑line tools, SDKs, or automation.

Ability to work confidently with low‑level device concepts, such as boot ROMs, bootloaders, memory configuration, fuses, keys, credentials, and lifecycle states.

Experience with or strong interest in modern secure firmware architectures, including areas such as measured boot, attestation, or identity management; exposure to firmware written in Rust is a strong advantage.

Proven ability to work independently, exercise sound technical judgement, and take responsibility for decisions and outcomes.

Strong communication skills and the ability to collaborate across disciplines, explain technical trade‑offs, and act as a trusted technical partner.

A proactive mindset and motivation to mentor less experienced engineers and contribute to shared engineering best practices.

What can you expect?

📝 Contract Type
This role is offered as a full‑time position with a permanent contract, providing long‑term stability and room for growth.

📚 Development Opportunities
We believe that growing our people is key to growing our business. That’s why we offer a mix of online and offline learning opportunities to help you sharpen both your technical and soft skills.

📝 Compensation Summary:

Attractive market salary is accompanied by the bonus plan (payment twice a year), long-term incentive plan and dividends processing, opportunity to purchase company shares at a 15% discount, lunch allowance, additional vacation days, sickness support, sick days, weekend bank holiday recovery days, pension and well-being support, flexible work hours, home office, team-buildings, and much more. Salaries are being reviewed each year, and market changes are closely observed.

We believe in providing a holistic and supportive work environment, and we would be happy to share more details during our face-to-face discussions.

🏢 Our Offices
We work in two locations – each with its own vibe:

Brno: A modern office with a fresh design, cozy rooms, and an in-house cafeteria.
Rožnov: A place with history and heart. A modern office with fresh design, and an in-house cafeteria. We love the relaxed atmosphere of the town and the wide selection of great restaurants, perfect for enjoying lunch with colleagues.
 

🚀 Hiring Process
Applying is quick and easy – just fill out the online form and upload your CV.
If your profile matches, you’ll have a short phone or video call with our technical team. If successful, you’ll get a chance to ask HR anything you need. We respond fast — unless we’re on vacation 😊.

🌟 And More... Life at NXP
Work is important, but so is everything around it. We start our days with free coffee and friendly chats. You can look forward to fresh fruit days, ice cream breaks, and even bake fairs.
We also organize social events like Christmas parties, family days, and food festivals. Want to give back? Join our charity initiatives and help us make a difference.

What’s next

Candidates are invited to apply on our career page with the resume and motivation letter in English for one or several open jobs at the same time.

The candidate may submit the CV for more than 1 open position.

At the application stage, all candidates should have a valid visa and work permit to work in Czech Republic.

If you’re excited about this opportunity, we kindly invite you to apply!

Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.