Andriod System Architect

System Architect (Cybersecurity)

The Cybersecurity System Architect is responsible for the security concept definition, the execution of cybersecurity analysis, the analysis of key cybersecurity technologies and trends, the customer and supplier facing activities.

As part of the Offer Team he/she contributes to the early definition of the product and the Cybersecurity Concept during the Offer Phase in order to make proper evaluation of the cybersecurity impacts on the HW and SW perimeter and related development effort and costs.

As part of the System and HW Platform/System Team he/she supports the design of the cybersecurity concept, including requirements and architecture modeling for HW and SW components, and architecture analysis.

Main Activities/responsibilities

• Responsible to create secure design for Android embedded Product based on customer requirements.
• Monitor technology trends on HW and SW cybersecurity relevant functionalities also comparing proposals from different vendors.
• Specify and select the basic HW and SW technologies needed to achieve the target performances and to ensure the best cost/performance compromise.
• Define the cybersecurity concept and document the functional repartition between HW and SW in cooperation with HW and SW System Architects.
• Elaborate internal System Requirements related to cybersecurity in cooperation with the System Requirement Engineer, HW and SW System Architects
• Model the System at functional and HW and SW level, also allocating System Requirements to the HW and SW System Blocks
• Provide governance in the HW and SW teams about different implementation proposals
• Ensure project execution and related work products are aligned with Cybersecurity processes and requirements.
• Participate when requested to the meetings with the customer supporting the Technical Project Leader (TPL) and SW Project Leader on technical discussions
• Deploy the Asset Analysis, Attack Surface and TARA.
• Estimate System performances also defining and using suitable models, in order to define the optimal HW and SW resources budget
• Responsible to analyze potential security vulnerabilities.
  
  

Key Skills

• Requirements management tools knowledge (e.g. DOORS)
• System Architecture design
• Architecture modeling methodologies and tools (SysML, UML, Enterprise Architect)
• Understanding of Cybersecurity standards for automotive (ISO 21434, UNECE R155)
• Analytic tools and methodologies (e.g. Asset Analysis, Attack Surface, TARA)
• Capability to effectively design and use multiprocessor architectures
• Knowledge of Operating Systems (e.g.: Linux kernel-based OS) and real-time OS (e.g.: AUTOSAR)
• Silicon devices, processors, micro-controller Cybersecurity analysis and mechanisms (e.g.: Secure Boot, Trust Zone, HSM, Secure Updates FOTA, etc.)
• Product Development Standard Processes
• Quality System knowledge
• Atlassian Suite (Jira, Confluence tools) knowledge
• Shall have experience with Secure Boot (controller specific secure boot and Android verified boot)
• Shall have conceptual understanding of securing user data and its confidentiality ( FBE and fs-verity).
• Shall have knowledge on working principle of TLS and mTLS.
• Knowledge of DM-verity, FS-verity, Integrity measurement architecture (IMA), SE linux, OS Hardening and Kernel Hardening is required.
• Shall have experience with OS and Kernal Hardening.
• Shall have experience with firewall configuration.
• Shall have Knowledge of SE linux.
• Shall have knowledge working principle of Trusted execution environment and Trusted Application (Keymaster and Gatekeeper)
• Shall have knowledge on Android secure storage.
• Working experience with Qualcomm SOC is advantage.
• Experience with Vehicle infotainment is added advantage.
• Knowledge of Virtualization concept using Containerization or hypervisor is added advantage.
  
  

Language Skills

• Advanced written and spoken English
  
  

Education & Former Experience

• Electronic Engineering Degree, Information Science Degree.
• Experience on HW and SW product development for the overall life cycle (from RFQ phase to Production follow up).
• More than 6 years-experience of embedded real time electronic product development with high level of SW contents.
• The above competences have to be maturated in automotive area or other large-scale markets.
• Experienced in planning, monitoring and control activities (Project Management & Tools)