Embedded Visa Sponsorship Jobs in California
Embedded engineering roles in California span aerospace firms in Los Angeles, semiconductor companies in Silicon Valley, and defense contractors along the San Diego corridor. Companies like Qualcomm, Intel, Apple, and Northrop Grumman have established records of sponsoring work visas for embedded talent, making California one of the most active states for this discipline.
Find Embedded JobsOverview
Showing 5 of 5,573+ Embedded Jobs in California with Visa Sponsorship
See all 5,573+ Embedded Jobs in California with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Embedded Jobs in California with Visa Sponsorship.
Get Access To All JobsINTRODUCTION
We are looking for an Embedded Systems Security Engineer to implement security solutions to harden our next-generation embedded Linux platform. In this role, you will bridge the gap between low-level hardware security, kernel hardening, and secure user-space application containment. You will not only design cryptographic defense mechanisms but will also automate security pipelines in CI/CD and partner directly with manufacturing teams to ensure devices are provisioned securely and reliably at scale without production risks.
Responsibilities
Platform Hardening & Architecture: Design and implement the Hardware Root of Trust and Secure Boot architecture from the first-stage bootloader through the Linux kernel.
Storage & Integrity Management: Implement dm-verity for cryptographically verified read-only root filesystems and secure data encryption at rest.
Trusted Execution Environments: Develop, integrate, and maintain a TEE (e.g., OP-TEE) and author Secure/Trusted Applications (TAs).
Application Sandboxing: Enforce strict user-space isolation and sandboxing strategies using SELinux, AppArmor, cgroups, namespaces, and seccomp filters to protect core systems from untrusted applications.
DevSecOps Automation: Build automated cryptographic signing pipelines within CI/CD infrastructure (e.g., GitLab CI, GitHub Actions) to securely sign bootloaders, kernels, and OTA payloads using HSMs or secure key vaults.
Production Provisioning Support: Collaborate with manufacturing teams to write robust scripts and tools for burning permanent hardware configuration fuses (eFuses / OTP memory) securely, designing end-of-line (EOL) test software to validate security features before shipping.
CORE EXPERIENCE
- 6+ years of professional experience in Embedded Linux development, board bring-up, and Board Support Package (BSP) customization.
- 3+ years of dedicated, hands-on experience deploying device-level security features into physical production hardware.
- Expert knowledge of bootloader configurations (e.g., U-Boot Verified Boot, Barebox) and customizing the Linux kernel storage/security subsystem (dm-crypt, dm-verity).
- Deep understanding of modern processor security architectures, specifically ARM TrustZone (ARMv7-A / ARMv8-A, Exception Levels EL1-EL3).
- Proven track record implementing SELinux/AppArmor policies and utilizing standard Linux containment tools (cgroups, namespaces).
- Proficiency with embedded Linux build automated frameworks like the Yocto Project (BitBake recipe design) or Buildroot.
- Advanced proficiency in C and strong scripting skills in Python or Bash.
PREFERRED
- Strong foundational knowledge of symmetric/asymmetric cryptography, hashing algorithms (SHA-256/384), public key infrastructure (PKI), and handling physical Hardware Security Modules (HSMs).
- Prior experience working with Contract Manufacturers (CMs) or internal factory lines to deploy secure key-injection and fuse-burning protocols.
- Experience with embedded container runtimes (e.g., LXC, crun) or lightweight sandboxing frameworks tailored for resource-constrained architectures.
- Experience designing secure versioning and hardware-enforced anti-rollback strategies for OTA updates.
INTRODUCTION
We are looking for an Embedded Systems Security Engineer to implement security solutions to harden our next-generation embedded Linux platform. In this role, you will bridge the gap between low-level hardware security, kernel hardening, and secure user-space application containment. You will not only design cryptographic defense mechanisms but will also automate security pipelines in CI/CD and partner directly with manufacturing teams to ensure devices are provisioned securely and reliably at scale without production risks.
Responsibilities
Platform Hardening & Architecture: Design and implement the Hardware Root of Trust and Secure Boot architecture from the first-stage bootloader through the Linux kernel.
Storage & Integrity Management: Implement dm-verity for cryptographically verified read-only root filesystems and secure data encryption at rest.
Trusted Execution Environments: Develop, integrate, and maintain a TEE (e.g., OP-TEE) and author Secure/Trusted Applications (TAs).
Application Sandboxing: Enforce strict user-space isolation and sandboxing strategies using SELinux, AppArmor, cgroups, namespaces, and seccomp filters to protect core systems from untrusted applications.
DevSecOps Automation: Build automated cryptographic signing pipelines within CI/CD infrastructure (e.g., GitLab CI, GitHub Actions) to securely sign bootloaders, kernels, and OTA payloads using HSMs or secure key vaults.
Production Provisioning Support: Collaborate with manufacturing teams to write robust scripts and tools for burning permanent hardware configuration fuses (eFuses / OTP memory) securely, designing end-of-line (EOL) test software to validate security features before shipping.
CORE EXPERIENCE
- 6+ years of professional experience in Embedded Linux development, board bring-up, and Board Support Package (BSP) customization.
- 3+ years of dedicated, hands-on experience deploying device-level security features into physical production hardware.
- Expert knowledge of bootloader configurations (e.g., U-Boot Verified Boot, Barebox) and customizing the Linux kernel storage/security subsystem (dm-crypt, dm-verity).
- Deep understanding of modern processor security architectures, specifically ARM TrustZone (ARMv7-A / ARMv8-A, Exception Levels EL1-EL3).
- Proven track record implementing SELinux/AppArmor policies and utilizing standard Linux containment tools (cgroups, namespaces).
- Proficiency with embedded Linux build automated frameworks like the Yocto Project (BitBake recipe design) or Buildroot.
- Advanced proficiency in C and strong scripting skills in Python or Bash.
PREFERRED
- Strong foundational knowledge of symmetric/asymmetric cryptography, hashing algorithms (SHA-256/384), public key infrastructure (PKI), and handling physical Hardware Security Modules (HSMs).
- Prior experience working with Contract Manufacturers (CMs) or internal factory lines to deploy secure key-injection and fuse-burning protocols.
- Experience with embedded container runtimes (e.g., LXC, crun) or lightweight sandboxing frameworks tailored for resource-constrained architectures.
- Experience designing secure versioning and hardware-enforced anti-rollback strategies for OTA updates.
Embedded Job Roles in California
See all 5,573+ Embedded Jobs in California
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Embedded Jobs in CaliforniaEmbedded Jobs in California: Frequently Asked Questions
Which companies sponsor visas for embedded engineers in California?
Qualcomm and Broadcom in San Diego, Intel and Apple in the Bay Area, and Northrop Grumman and Raytheon in Southern California are among the employers with documented histories of sponsoring H-1B visa and other work visas for embedded roles. Defense and semiconductor firms tend to be the most active sponsors, as embedded expertise is consistently difficult to source domestically.
Which visa types are most common for embedded roles in California?
The H-1B is the most common visa for embedded engineers in California, as most roles require a bachelor's degree or higher in electrical engineering, computer engineering, or a related field, meeting the specialty occupation standard. Candidates with a master's degree may benefit from the advanced degree exemption in the H-1B lottery. Nationals from Australia, Canada, or Mexico may also qualify for the E-3 visa or TN visa respectively.
Which cities in California have the most embedded sponsorship jobs?
San Diego leads in embedded sponsorship volume due to its concentration of semiconductor and defense employers, particularly around Qualcomm, Northrop Grumman, and General Atomics. The San Francisco Bay Area follows closely, driven by Apple, Intel, and a range of automotive and IoT startups. Los Angeles also maintains a steady pipeline through its aerospace and defense sector.
How to find embedded visa sponsorship jobs in California?
Migrate Mate filters job listings specifically by visa sponsorship availability, so you can search embedded roles in California without manually screening out employers who don't sponsor. The platform surfaces positions from semiconductor, defense, automotive, and consumer electronics companies across San Diego, the Bay Area, and Los Angeles, helping you focus applications on employers already open to international candidates.
Are there state-specific considerations for embedded engineers seeking sponsorship in California?
California's strong union and labor protections do not directly affect visa sponsorship, but employers must comply with Department of Labor prevailing wage requirements tied to the metropolitan area where the role is based. Bay Area and San Diego prevailing wages for embedded roles are among the highest in the country, which means sponsoring employers must offer competitive compensation as a legal condition of the petition, not just market preference.
What is the prevailing wage for sponsored embedded jobs in California?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.