Software Engineer, Device Management

Summary

Help build the foundation of Rivet’s device platform: the secure OS layer and lightweight host services that manage our hardware in the field. This role sits at the intersection of systems engineering, security architecture, and embedded infrastructure. You’ll own core pieces of the stack and design with compliance and reliability in mind.

Responsibilities

• Design and maintain low-level Android/Linux platform code: AOSP customizations, system services, HALs, and kernel-level integration
• Build lightweight host services for device communication, policy distribution, and telemetry
• Ship secure device management end to end: enrollment, provisioning, attestation, policy enforcement, and over-the-air updates
• Define and enforce secure software and system configurations across the device fleet
• Build and manage secure, reproducible environments: certificate signing, sandboxing, and runtime hardening
• Integrate with the third-party MDM systems some of our customers deploy
• Align deployment practices to regulatory and high-assurance frameworks
• Act as a key owner across the stack, shipping pragmatic, secure, well-documented systems that scale

Requirements

• 5+ years building Android system-level code (AOSP, custom ROMs, HALs, system services, etc.)
• Strong Linux systems programming experience and proficiency in Go or a similar modern systems language
• Practical experience with MDM/EMM systems: secure enrollment, device posture, and policy enforcement
• Familiarity with secure boot, TPM, certificate chains, attestation, and other low-level security primitives
• Experience building hardened Android images for regulated or high-assurance deployments
• Working understanding of containerization and sandboxing on Linux or Android
• HTTP API design and implementation
• BS in CS, CE, or equivalent demonstrated experience

Preferred Qualifications

• Device Owner / Device Policy Controller experience on Android (DPM APIs, COSU/COPE, managed profiles)
• Familiarity with third-party MDM/EMM stacks (eg. Intune, Omnissa), Android Enterprise, and server-side integration APIs
• SELinux policy authoring
• Protobuf and code-generation pipelines
• Cross-compile and static ARM64 builds; Yocto; AOSP device-tree
• C++ at the NDK or vendor-SDK level
• Security-first mindset with experience hardening real-world systems in regulated environments