Firmware Engineer

Firmware Engineer – Secure Embedded Systems | Transport & Rail Tech

Onsite | Vienna, Austria | Full-time | Permanent

We are seeking a Firmware Engineer with deep expertise in Secure Embedded Systems to join our client's engineering team in Vienna, working on cutting-edge safety-critical solutions for the transport and rail sector.

This is an exciting opportunity to develop secure firmware architectures, implement FOTA (firmware-over-the-air) mechanisms, and integrate hardware root of trust into next-generation transportation systems.

What You’ll Do:

• Design and implement secure firmware for embedded platforms in railway and transport applications.
• Develop and maintain FOTA systems ensuring encrypted, authenticated, and fail-safe update processes.
• Integrate hardware-based security features such as Secure Boot, Trusted Execution Environments (TEE), and Hardware Root of Trust (HRoT).
• Collaborate with hardware and security teams to define secure boot chains and key provisioning workflows.
• Contribute to system architecture and participate in threat modeling, security reviews, and compliance efforts.
• Ensure firmware meets industry standards for safety and cybersecurity (e.g., EN 50128, IEC 62443).

What You Bring:

• Strong experience in embedded firmware development in C/C++, with a focus on secure systems.
• Hands-on experience with FOTA architectures, update failover strategies, and rollback protections.
• Deep knowledge of secure boot, firmware signing, cryptographic libraries (e.g., mbedTLS, WolfSSL), and key management.
• Familiarity with ARM TrustZone, TPMs, or other hardware security modules (HSMs).
• Experience with RTOS-based or bare-metal embedded systems in safety- or mission-critical contexts.
• Proficiency with embedded debugging tools, version control (Git), and secure development best practices.

Bonus Points:

• Experience in transportation, automotive, avionics, or other regulated industries.
• Familiarity with IEC 62443, EN 50128, or other safety/security standards.
• Experience with secure communication protocols (TLS, DTLS, MQTT-SN).
• Exposure to secure storage, anti-cloning techniques, or secure key injection during manufacturing.