Your role:
- Implement rootfs encryption on NXP i.MX using the CAAM hardware security module as the key source.
- Integrate LUKS-based disk decryption into the initramfs, triggered automatically and securely at boot.
- Configure and maintain the Yocto build system; work on the latest LTS Linux mainline kernel.
- Intervene at the bootloader level (U-Boot) where required to support the secure boot sequence.
- Document the implemented solution and support integration and validation testing.
Profile / Requirements :
Technical Skills
- Hands-on experience with NXP i.MX platform and its CAAM security module — required
- Strong knowledge of Linux security mechanisms: LUKS, dm-crypt, encrypted volumes.
- Solid experience with Yocto and building custom Linux distributions for embedded targets.
- Familiarity with the Linux early boot sequence: U-Boot, initramfs, kernel startup.
- Proficient in C and comfortable reading/writing low-level embedded code.
- Knowledge of U-Boot configuration and customisation is a strong plus.
- Experience with Git and CI pipelines.
Mindset & Soft Skills
- Autonomous and hands-on: you can take a half-assembled technical puzzle and see it through to a working, documented solution.
- Comfortable working directly within a client's R&D team in a collaborative environment.
Practical
- Available to work on-site in West Flanders 2 days/ week.
- Short-term availability is strongly preferred.
- Proficient level of English