Role: Software Engineer, Device Management

Location: Bellevue, WA or San Jose, CA

Compensation*: $180,000-$240,000 + benefits

Description

Help build the foundation of Rivet’s device platform: the secure OS layer and lightweight host services that manage our hardware in the field. This role sits at the intersection of systems engineering, security architecture, and embedded infrastructure. You’ll own core pieces of the stack and design with compliance and reliability in mind.

Responsibilities

Design and maintain low-level Android/Linux platform code: AOSP customizations, system services, HALs, and kernel-level integration
Build lightweight host services for device communication, policy distribution, and telemetry
Ship secure device management end to end: enrollment, provisioning, attestation, policy enforcement, and over-the-air updates
Define and enforce secure software and system configurations across the device fleet
Build and manage secure, reproducible environments: certificate signing, sandboxing, and runtime hardening
Integrate with the third-party MDM systems some of our customers deploy
Align deployment practices to regulatory and high-assurance frameworks
Act as a key owner across the stack, shipping pragmatic, secure, well-documented systems that scale

Requirements

5+ years building Android system-level code (AOSP, custom ROMs, HALs, system services, etc.)
Strong Linux systems programming experience and proficiency in Go or a similar modern systems language
Practical experience with MDM/EMM systems: secure enrollment, device posture, and policy enforcement
Familiarity with secure boot, TPM, certificate chains, attestation, and other low-level security primitives
Experience building hardened Android images for regulated or high-assurance deployments
Working understanding of containerization and sandboxing on Linux or Android
HTTP API design and implementation
BS in CS, CE, or equivalent demonstrated experience

Preferred Qualifications

Device Owner / Device Policy Controller experience on Android (DPM APIs, COSU/COPE, managed profiles)
Familiarity with third-party MDM/EMM stacks (eg. Intune, Omnissa), Android Enterprise, and server-side integration APIs
SELinux policy authoring
Protobuf and code-generation pipelines
Cross-compile and static ARM64 builds; Yocto; AOSP device-tree
C++ at the NDK or vendor-SDK level
Security-first mindset with experience hardening real-world systems in regulated environments

*Total compensation may vary within this range and is determined by years and level of relevant experience, job-related skills, education, and other factors. In addition to base salary, this role may be eligible for equity grants and other forms of compensation. Eligible employees also receive a competitive benefits package, including unlimited PTO.

EOE

Learn more about this Employer on their Career Site