Senior Secure Provisioning Software Engineer

Ready to join the future of innovation in our team at NXP

You will join a team responsible for Secure Provisioning SDK (SPSDK) a unified Pythonbased platform used across NXPs MCU and application processor portfolio. SPSDK provides essential tooling for secure device provisioning configuration boot preparation lifecycle control and securitycritical operations supporting devices from early prototyping through production deployment.

SPSDK is used not only by software developers but also in automated CI environments manufacturing and customer production flows. The solutions you work on must therefore be robust secure auditable and safe by design as they directly interact with the most sensitive parts of the device such as bootloaders ROM keys fuses and lifecycle states.

In this senior role you will take endtoend ownership of selected parts of the SPSDK platform. You will design implement and evolve secure provisioning workflows APIs and commandline tools balancing security usability and longterm maintainability and taking responsibility for technical decisions within your area.

Your work will span multiple layers including lowlevel device communication secure boot image preparation cryptography and key management lifecycle configuration and Pythonbased tooling and reusable APIs.

Your team

By joining our Czech team you will become part of a highperformance and enthusiastic software development team working on Secure Provisioning SDK (SPSDK).

The team operates in a friendly and dynamic work environment while delivering solutions used in real production scenarios.

You will have the opportunity to collaborate with a wide range of NXP teams including system and firmware teams silicon and security experts and product stakeholders contributing to solutions that span from early development to manufacturing and customer deployment. The role offers strong exposure to crossfunctional collaboration where feedback discussion and proposing technically sound solutions are part of everyday work.

The team values technical ownership open communication and shared responsibility. Engineers are encouraged to take initiative think beyond their immediate tasks and contribute to improving both the platform and the way the team works together.

Your responsibilities:

Take endtoend technical ownership of selected parts of the Secure Provisioning SDK (SPSDK) including design implementation and longterm maintenance.

Design and evolve secure provisioning configuration and device lifecycle workflows.

Develop and maintain Pythonbased commandline tools and reusable APIs with a strong focus on robustness security and longterm maintainability.

Enable reliable and secure interaction with devices at low level including communication with boot ROMs and bootloaders.

Contribute to secure boot image preparation cryptographic operations and key credential and lifecycle state handling.

Independently make technical and securityrelevant decisions and take responsibility for their outcomes.

Collaborate with firmware silicon security architecture and product teams providing technical input and explaining tradeoffs.

Mentor less experienced engineers review designs and implementations and contribute to shared engineering best practices.

Your profile:

Strong background in software engineering with experience building productiongrade tools or platforms.

Practical experience with secure boot device provisioning Root of Trust concepts or device lifecycle security.

Solid experience with Python used for developing robust commandline tools SDKs or automation.

Ability to work confidently with lowlevel device concepts such as boot ROMs bootloaders memory configuration fuses keys credentials and lifecycle states.

Experience with or strong interest in modern secure firmware architectures including areas such as measured boot attestation or identity management; exposure to firmware written in Rust is a strong advantage.

Proven ability to work independently exercise sound technical judgement and take responsibility for decisions and outcomes.

Strong communication skills and the ability to collaborate across disciplines explain technical tradeoffs and act as a trusted technical partner.

A proactive mindset and motivation to mentor less experienced engineers and contribute to shared engineering best practices.

What can you expect

Contract Type
This role is offered as a fulltime position with a permanent contract providing longterm stability and room for growth.

Development Opportunities
We believe that growing our people is key to growing our business. Thats why we offer a mix of online and offline learning opportunities to help you sharpen both your technical and soft skills.

Compensation Summary:

Attractive market salary is accompanied by the bonus plan (payment twice a year) long-term incentive plan and dividends processing opportunity to purchase company shares at a 15% discount lunch allowance additional vacation days sickness support sick days weekend bank holiday recovery days pension and well-being support flexible work hours home office team-buildings and much more. Salaries are being reviewed each year and market changes are closely observed.

We believe in providing a holistic and supportive work environment and we would be happy to share more details during our face-to-face discussions.

Our Offices
We work in two locations each with its own vibe:

• Brno: A modern office with a fresh design cozy rooms and an in-house cafeteria.
• Rožnov: A place with history and heart. A modern office with fresh design and an in-house cafeteria. We love the relaxed atmosphere of the town and the wide selection of great restaurants perfect for enjoying lunch with colleagues.

Hiring Process
Applying is quick and easy just fill out the online form and upload your CV.
If your profile matches youll have a short phone or video call with our technical team. If successful youll get a chance to ask HR anything you need. We respond fast unless were on vacation .

And More... Life at NXP
Work is important but so is everything around it. We start our days with free coffee and friendly chats. You can look forward to fresh fruit days ice cream breaks and even bake fairs.
We also organize social events like Christmas parties family days and food festivals. Want to give back Join our charity initiatives and help us make a difference.

Whats next

Candidates are invited to apply on our career page with the resume and motivation letter in English for one or several open jobs at the same time.

The candidate may submit the CV for more than 1 open position.

At the application stage all candidates should have a valid visa and work permit to work in Czech Republic.

If youre excited about this opportunity we kindly invite you to apply!

Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications therefore a conscious and reliable way of working is necessary.

More information about NXP in Czech Republic...