Job Description

Who We Are

We don’t just develop embedded software — we engineer intelligence into products. The Embedded Competence Center at NTT DATA Romania brings together experts in embedded systems, firmware development, and hardware–software integration, delivering robust and high-performance solutions for complex, safety-critical environments. With strong expertise in C/C++, AUTOSAR, real-time operating systems, and communication protocols, we design scalable embedded architectures, integrate software seamlessly with hardware, and ensure compliance with industry standards. Across the industries we support — from Automotive and Industrial Automation to Smart Devices and IoT — we transform reliable embedded technology into a foundation for innovative, dependable products.

You will be part of the development of an advanced telematics solution for commercial vehicles. You will join feature teams, working in an Agile environment (SAFe framework), contributing to the delivery of features within Program Increments (12-week cycles). This role is well suited for freelancers or independent consultants looking to work on complex automotive embedded projects.

What you'll be doing

• Architect and validate the hardware-rooted Chain of Trust
• Manage secure boot flow from Qualcomm PBL → Linux kernel → user space
• Define and implement PKI strategy
• Manage: Certificate lifecycle; Code-signing authorities; PKCS standards (especially PKCS#11)
• Enable secure interaction with HSM / TrustZone
• Design and implement SELinux policies
• Enforce least privilege principles
• Perform security audits across system services
• Design and integrate real-time intrusion detection mechanisms
• Monitor: Anomalous behavior; Protocol violations; Unauthorized access
• Participate in Threat Analysis and Risk Assessment (TARA)
• Align with ISO/SAE 21434
• Identify attack vectors and define mitigation strategies
• Ensure secure software update (OTA) processes
• Prevent: Rollback attacks and Unauthorized firmware injection
• Design cryptographic validation mechanisms
  

What you'll bring along

• Degree in Computer Science, Business Informatics, or a comparable field
• Minimum 5 years of experience in a similar position
• Strong experience with Qualcomm security architecture: Trusted Execution Environment (TEE); TrustZone; Secure MSM
• Deep understanding of: Asymmetric & symmetric cryptography; Hashing algorithms; PKCS standards
• Expertise in: SELinux policy development (targeted / MLS); Linux hardening (namespaces, kernel protection)
• Strong knowledge of: ISO/SAE 21434 and UN R155 / R156
• Experience with: MACSec (IEEE 802.1AE) and MKA protocol
• Experience with: Automotive Ethernet security
• Experience with: Embedded Linux / Yocto and Security layers (meta-security, dm-verity, secure mounts)
• Expert-level C++ (C++14 / C++17 / C++20)
• Experience with: Multithreading; Async programming; Memory management
• Experience with automotive telematics systems is nice to have
• Background in HSM integration is nice to have
• Experience in large-scale embedded architectures is nice to have
• Exposure to secure communication stacks is nice to have