Embedded Zephyr & Security Consultant
Senior Embedded Software Consultant with a focus on Zephyr RTOS and end‑to‑end firmware security.
Services
Zephyr RTOS porting & BSPs
Need Zephyr on new silicon?
I create lean, upstream‑ready BSPs, configure device trees, clock and power domains, and deliver driver stacks. Your team gets reproducible builds, polished CI, and traceable patches merged into mainline—so future SDK releases just work.
Secure‑boot & cryptography
From first instruction to application main(), I lock the chain of trust with Trusted Firmware‑M, MCUboot and hardware roots. I craft key hierarchies, AES‑GCM / ED25519 bundles and anti‑rollback counters, enabling dual‑bank updates and tamper‑evidence. The result: authenticated firmware that survives pen‑tests.
Secure Architecture: Comms, OTA, Provisioning
I design product‑wide security architectures. Expect encrypted radio or wired channels with mutual authentication, device attestation, metadata‑signed OTA, and provisioning flows that bind devices to cloud PKI. Documentation and threat models ship alongside, ready for relevant certifications or customer audits.
Linux System Programming & Secure Networking
When your Zephyr node needs a companion gateway, I step into Linux user‑space: writing efficient C daemons, integrating D‑Bus, systemd, and hardening interfaces with iptables. The deliverable is a secure communication, device operations management, data acquisition, processing and storage.
Highlighted Experience
Smart Industrial Lock — Swedish Security OEM
Designed and shipped the firmware for an IP‑rated mechatronic padlock certified to EN 17646. Implemented TLS‑style authentication over BLE, secure boot and encrypted OTA. Independent pen-test scored A; product is now in deployment at Asian banks.
Vehicle Charger BSP & ISO 15118 — NYSE‑listed EV charging company
Ported Zephyr RTOS to custom STM32 boards, created drivers for analog peripherals, and integrated elements of ISO 15118 communication layer. The product will be part of charging systems from late 2025.
Nokia Mobile Networks
Led software quality assurance in 3G base stations, acted as internal auditor for ISO 9000 and ISO 27000, and steered global teams through ~10 successful external audits. Led and supervised implementation of hundreds of quality improvements.
Open source contributions
- Zephyr: Added WeAct STM32U585CI board (commit
2073ce2…) - Zephyr: enhanced VL53L0X distance sensor driver and sample (commits
d318726…,f6faecd…) - Zephyr: fixed a Coverity dead‑code bug (commit
81bf6e7…).