10+ years in embedded systems or manufacturing engineering
3+ years in secure device provisioning or manufacturing processes
Experience with PKI and X.509 certificate lifecycles
Hands-on experience with EOL test specifications and quality management
Advanced skills in Python or Bash for automation
Experience with AWS infrastructure and secure provisioning services
Ability to design secure processes for untrusted manufacturing environments
Responsibilities
Design the secure manufacturing station for device provisioning
Build and manage the provisioning toolchain from bare device to functional test
Bridge device identity with cloud infrastructure for OTA updates
Own EOL test specifications to ensure device quality and security
Translate security requirements for contract manufacturers into executable procedures
Maintain chain of custody linking device identity to provisioning records
Collaborate with globally distributed teams on manufacturing and security protocols
Benefits
Comprehensive health coverage including medical, dental, and vision
23 days of PTO, separate sick leave, and paid holidays
401(k) retirement plan with employer match
Equity options to share in company growth
Free catered lunch, snacks, and drinks in-office
Opportunities to collaborate with top-tier engineers in AI and robotics
Freedom to influence product initiatives
Full Job Description
About the Role
We're scaling from prototypes to manufacturing, and the process maturity needs to match. This role owns the secure manufacturing pipeline - the procedures, tooling, and controls that take a bare board in an untrusted CM facility and turn it into a cryptographically enrolled, OTA-ready device that our cloud fleet trusts. You'll be the bridge between our secure boot/firmware teams and the cloud control plane, connecting them at the point of manufacture.
What You'll Do
Design the secure manufacturing station - Architect the hardware, software, and network stack for factory floor provisioning stations (HSM, key injection, AWS Private CA, secure boot fuse programming).
Build the provisioning toolchain - Own the automation pipeline that takes a bare device through identity provisioning, firmware flashing, calibration, and functional test.
Bridge device and cloud identity Enroll every device into a registry with correct credentials for OTA, session heartbeating, and deployment tracking.
Own the EOL test specification - Work with peer teams to define pass/fail criteria for devices leaving the line: sensor calibration, actuator checks, secure boot verification, and initial OTA health check.
Work with contract manufacturers -Translate security requirements into CM-executable procedures; threat-model the factory for key leakage, firmware tampering, and supply chain substitution.
Maintain chain of custody - Link each physical serial number to its provisioned identity, calibration records, test results, and firmware version at manufacture.
Collaborate across teams - Work daily with a globally distributed team of firmware, cloud, manufacturing, systems and operational team members.
What We're Looking For
10+ years of experience in embedded systems, device security, or manufacturing engineering, with at least 3 years focused on secure device provisioning and/or secure manufacturing processes. And ideally 3 years in a Staff level role.
PKI and device identity - Experience with X.509 certificate lifecycles, mTLS, device attestation and managed CA services like AWS Private CA.
AWS infrastructure - S3, IAM, ECS, KMS, CloudHSM and Secrets Manager for secure provisioning workflows.
EOL test and calibration - Hands-on experience defining manufacturing test specifications, building automated fixtures, and managing quality gates with contract manufacturers.
Scripting and automation - Advanced skills in Python or Bash for developing production-grade provisioning toolchains.
Embedded Linux systems - Experience with NVIDIA Jetson Orin/Thor platforms.
Secure manufacturing design - Ability to design secure processes for untrusted or semi-trusted offshore CMs, including A/B partitioning, signed image verification, and air-gapped station design.
Hardware root of trust understanding - General understanding of secure boot chains, TPM/TrustZone, cryptographic key injection, certificate provisioning, and eFuse programming.
What We Offer
Comprehensive health coverage for US-based employees, including fully paid medical, dental, and vision insurance, with virtual care and employee assistance resources.
Meaningful time off to rest and recharge: 23 days of PTO (accrued), separate sick leave, and paid company holidays.
401(k) retirement plan with employer match.
Equity included-we believe builders should share in what they build.
Free daily catered lunch, snacks, and drinks in-office.
Collaboration with top-tier engineers, researchers, and product experts in AI and robotics.
Freedom to influence the product and own key initiatives.
For this role in California, the expected base salary range is $260,000-$320,000 USD per year; your placement in that range depends on how your experience maps to our internal leveling.
About Boston Dynamics
Boston Dynamics is an American engineering and robotics design company founded in 1992 as a spin-off from the Massachusetts Institute of Technology. The company is best known for the development of BigDog, a quadruped robot designed for the U.S. military. Boston Dynamics has also developed a number of other robots, including Spot, a four-legged robot designed for indoor and outdoor operation, and Atlas, a humanoid robot designed for a variety of search and rescue tasks. In 2013, the company was acquired by Google X, a subsidiary of Alphabet Inc. In 2020, the company was acquired by Hyundai Motor Group. Boston Dynamics is headquartered in Waltham, Massachusetts.
