Embedded OS Engineer

{
  "content_hash": "02acb0cfe06906a9db365beab0b622524dccafe6f17b965da9083e368a2b6695",
  "source_hash": "b3f12067639660b1833205669844dcf3667ecdad275b6fc1c449237063311843",
  "last_changed_at": "2026-05-31T19:07:33.518Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Teal Drones - SLC, UT 84115; 2800 S West Temple Suite 2, SLC, UT, 84115, USA",
    "city": "SLC",
    "region": "UT",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T09:56:47.162Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Teal Drones - SLC, UT 84115; 2800 S West Temple Suite 2, SLC, UT, 84115, USA",
      "city": "SLC",
      "region": "UT",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "remote",
  "salary_period": "day",
  "workplace_type": "remote",
  "salary_currency": null
}

{}

{
  "detail": {
    "city": "SLC",
    "jobId": 223933,
    "level": "",
    "endDate": "",
    "legalId": 107,
    "isHotJob": false,
    "jobShift": "",
    "jobTitle": "Embedded OS Engineer",
    "location": "Teal Drones - SLC, UT 84115",
    "startDate": "",
    "clientCode": "0YV04",
    "remoteType": "",
    "description": "<p><strong><span style=\"font-family:Arial,sans-serif\">Position Summary</span></strong></p>\n\n<div style=\"margin-top:8px; text-align:center; text-indent:-.1pt\">\n<hr /></div>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Teal Drones is looking for a hands-on Embedded OS Engineer to own the Ubuntu-based Linux firmware stack on our MK2 drone platform (Qualcomm QRB5165). You will be the person who builds the OS, keeps it secure, makes it reliable, and ships it through automated CI/CD pipelines. </span></span></p>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">The questions you&rsquo;ll be asked every day are ones like: Why did that service fail on boot? How do we strip this unnecessary network daemon out of the image without breaking the build graph? What&rsquo;s the fastest way to test a rootfs post-process change without waiting three hours for a full Yocto rebuild?</span></span></p>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">This is not a role for someone who has only worked at the application layer. We need someone comfortable navigating low-level OS internals, Yocto&rsquo;s BitBake machinery, systemd unit files, and the realities of headless embedded hardware with no display and limited recovery options.</span></span></p>\n\n<div style=\"text-align:center; text-indent:0in\">\n<hr /></div>\n\n<p><strong><span style=\"font-family:Arial,sans-serif\">Essential Duties and Responsibilities</span></strong></p>\n\n<div style=\"margin-top:8px; text-align:center; text-indent:-.1pt\">\n<hr /></div>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Yocto / BitBake Build System</span></strong></span></p>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Own and maintain the teal-mk2-build repository, including layer configuration, local.conf tuning, and image recipes that produce the qti-ubuntu-robotics-image.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Write and maintain .bb recipes and .bbappend overlays; create .patch files (git diff&ndash;based) against the pinned Qualcomm QRB5165 BSP (LU.UM.3.3.1) so that upstream sources are never modified directly.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Debug BitBake task failures&mdash;understanding the do_fetch &rarr; do_compile &rarr; do_rootfs &rarr; do_image pipeline, sstate-cache behavior, and when to use -c cleansstate vs. -c rootfs -f.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Optimize build performance: reduce full-build times by understanding QEMU emulation overhead vs. native ARM64 compilation, tuning BB_NUMBER_THREADS and PARALLEL_MAKE, and leveraging shared sstate-cache across Jenkins agents.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Manage package inclusion, exclusion (IMAGE_INSTALL:remove, PACKAGE_EXCLUDE, BAD_RECOMMENDATIONS), and inter-recipe dependency graphs.</span></span></li>\n</ul>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Rootfs Post-Processing &amp; OS Hardening</span></strong></span></p>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Implement ROOTFS_POSTPROCESS_COMMAND functions to perform post-build OS customization: package upgrades, apt security patching (Ubuntu ESM), service installation, and file system fixups.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Remove unnecessary services from production images&mdash;including HTTP servers (lighttpd), TFTP daemons, and other attack-surface-expanding services identified in Blue List / Nessus security assessments.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Write bash scripts and systemd service units that execute reliably in a headless, rootfs post-install context (no interactive terminal, limited /proc and /dev availability).</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Manage the dpkg / apt ecosystem within the embedded rootfs: pinning packages, handling held packages, validating package state, and ensuring apt lock files are clean across incremental builds.</span></span></li>\n</ul>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Jenkins CI/CD Pipelines</span></strong></span></p>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Maintain and improve Jenkins pipelines that build Yocto firmware images, including handling concurrent build isolation, artifact staging, and race conditions between parallel jobs.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Diagnose and resolve Jenkins agent performance issues: Java heap tuning, Docker overlay2 disk pressure, container lifecycle management, and build environment reproducibility.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Implement proper artifact copy patterns (stageDir isolation) to prevent race conditions when multiple builds run concurrently against shared directories.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Manage GitLab repository structure and branch protection for the build repo; implement .patch-based change workflows that preserve the integrity of pinned upstream BSP branches.</span></span></li>\n</ul>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Embedded Linux System Configuration</span></strong></span></p>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Configure systemd-networkd for runtime network mode switching (DHCP &harr; link-local) on headless devices using udev rules, button-press event handlers, and LED feedback mechanisms.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Write and maintain systemd service units and timers: understanding WantedBy, After, Requires, and ExecStart semantics for embedded boot sequences.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Implement reliable USB logging and file transfer services (usb-gadget, udevadm) for field diagnostics on devices with no screen.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Develop and maintain Prometheus node_exporter integrations and process-exporter configurations for drone fleet health monitoring via Grafana dashboards.</span></span></li>\n</ul>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Security &amp; Compliance</span></strong></span></p>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Remediate Nessus / Blue List security findings affecting the embedded OS: SSH hardening (key-only auth, sshd_config tuning), open port reduction, and service inventory documentation.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Maintain /etc/shadow hygiene, locked account policies, and PAM configurations appropriate for production embedded devices.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Generate and maintain security compliance artifacts (port inventories, service lists, patch status reports) for internal security assessors.</span></span></li>\n</ul>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Reliability &amp; Performance Tuning</span></strong></span></p>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Profile and diagnose slow boot sequences, runaway processes, and memory pressure on ARM64 embedded hardware.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Use screen, tmux, and remote shell tooling to manage long-running build and deployment sessions on headless servers and devices.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Implement OS-level monitoring: log capture services, boot-time diagnostics, and watchdog patterns for unattended field deployment.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Advise on cloud build infrastructure choices (AWS Graviton / Azure ARM64) to eliminate QEMU emulation overhead and achieve 3&ndash;5&times; build time reductions.</span></span></li>\n</ul>\n\n<div style=\"text-align:center; text-indent:0in\">\n<hr /></div>\n\n<p><strong><span style=\"font-family:Arial,sans-serif\">Required Qualifications</span></strong></p>\n\n<div style=\"margin-top:8px; text-align:center; text-indent:-.1pt\">\n<hr /></div>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Bachelor&#39;s or master&#39;s degree in Computer Science, Computer Engineering, or a related field.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">5+ years of embedded Linux engineering experience, including direct ownership of Yocto/BitBake build systems (or similar) in a production environment.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Strong proficiency with BitBake concepts: recipes (.bb), appends (.bbappend), image recipes, ROOTFS_POSTPROCESS_COMMAND, sstate-cache, and task dependency graphs.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Hands-on experience writing and applying .patch files against BSP/upstream sources to manage downstream customizations without modifying pinned branches.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Deep knowledge of systemd: service units, network configuration (systemd-networkd, .network files), udev rules, and boot dependency ordering.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Proficiency in bash scripting for OS-level automation: apt/dpkg management, file system operations, LED/GPIO control, and headless device configuration.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Experience with Ubuntu on ARM64 platforms, including ESM security patching, package management, and kernel/BSP integration.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Familiarity with Jenkins or equivalent CI/CD platforms: pipeline scripting, agent management, Docker-in-Docker build environments, and artifact handling.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Experienced with SSH-based workflows, git patch workflows, and working entirely in headless terminal environments.</span></span></li>\n</ul>\n\n<div style=\"text-align:center; text-indent:0in\">\n<hr /></div>\n\n<p><strong><span style=\"font-family:Arial,sans-serif\">Additional Desired Qualifications</span></strong></p>\n\n<div style=\"margin-top:8px; text-align:center; text-indent:-.1pt\">\n<hr /></div>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Experience with Qualcomm QRB5165 or similar robotics/drone SoC platforms and their associated BSP layers.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Experience configuring Prometheus, node exporter, process-exporter, and Grafana for embedded device fleet monitoring.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Familiarity with Python Flask for internal tooling (device registration, fleet management dashboards).</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Knowledge of cross-compilation tools and methods.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Experience with ADB (Android Debug Bridge) workflows for Qualcomm-based embedded targets.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Exposure to radio licensing and MAC-based device authentication workflows (e.g., Doodle Labs radios).</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Hands-on experience in AWS Cloud management and infrastructure provisioning.</span></span></li>\n</ul>\n\n<div style=\"text-align:center; text-indent:0in\">\n<hr /></div>\n\n<p><strong><span style=\"font-family:Arial,sans-serif\">Physical Requirements and Working Conditions</span></strong></p>\n\n<div style=\"margin-top:8px; text-align:center; text-indent:-.1pt\">\n<hr /></div>\n\n<ul>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Must be able to walk, stand, and navigate large indoor and outdoor facilities for extended periods of time.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Ability to lift, carry, and move materials and equipment weighing up to 25 lbs on a regular basis.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Use of personal protective equipment (PPE) may be required in designated areas or when performing specific tasks, in accordance with safety protocols and company policy.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">May be required to climb ladders, stoop, kneel, or crouch during inspections, maintenance walk-throughs, or emergency response situations.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Regular exposure to facility operations including noise, dust, temperature fluctuations, and industrial equipment.</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Occasional off-hours or weekend work required for emergency facility responses or projects as needed</span></span></li>\n\t<li><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Requires frequent use of a computer and other standard office equipment for documentation, communication, and coordination tasks.</span></span></li>\n</ul>\n\n<div style=\"margin-bottom:13px; margin-top:13px; text-align:center; text-indent:0in\">\n<hr /></div>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Background</span></strong> <strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Check</span></strong></span></p>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">This position will require successfully completing a post-offer background check. Qualified candidates with a criminal history will be considered and are not automatically disqualified, consistent with federal and state law.</span></span></p>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">EEO and ITAR/EAR Work Authorization Disclosure</span></strong></span></p>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Red Cat Holdings provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This position requires direct or indirect access to hardware, software, technology or technical data controlled under the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Successful candidates for positions subject to ITAR/EAR restrictions must provide proof of U.S. Citizenship or Permanent Residence and must not require sponsorship for export-restricted work authorization.</span></span></p>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><strong><span style=\"font-family:&quot;Arial&quot;,sans-serif\">E-Verify</span></strong></span></p>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">The company participates </span><a href=\"https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">E-Verify</span></a><span style=\"font-family:&quot;Arial&quot;,sans-serif\"> ensure eligibility for employment and compliance with </span><a href=\"https://www.e-verify.gov/sites/default/files/everify/posters/IER_RightToWorkPoster%20Eng_Es.pdf\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Right to Work</span></a><span style=\"font-family:&quot;Arial&quot;,sans-serif\"> rules.</span></span></p>\n\n<p><span style=\"font-family:&quot;Times New Roman&quot;,serif\"><span style=\"font-family:&quot;Arial&quot;,sans-serif\">Compensation: Salary plus generous annual equity package and potential bonuses.</span></span></p>\n",
    "jobCategory": "",
    "salaryRange": "",
    "socialMedia": {
      "xLink": null,
      "emailLink": null,
      "facebookLink": null,
      "linkedInLink": null
    },
    "isQuickApply": false,
    "positionType": "",
    "countryPaidIn": "",
    "googleJobJson": "{\"@context\":\"https://schema.org/\",\"@type\":\"JobPosting\",\"title\":\"Embedded OS Engineer\",\"identifier\":\"J0YV04223933\",\"url\":\"https://www.paycomonline.net/v4/ats/web.php/portal/DF82F4FEC533913CE59D380DC7829351/jobs/223933\",\"image\":\"https://www.paycomonline.net/v4/ats/web.php/application/style/logo?clientkey=DF82F4FEC533913CE59D380DC7829351\",\"datePosted\":\"2025-09-23\",\"description\":\"Job DetailsJob Location: Teal Drones - SLC, UT 84115Position Summary\\n\\n\\n\\n\\nTeal Drones is looking for a hands-on Embedded OS Engineer to own the Ubuntu-based Linux firmware stack on our MK2 drone platform (Qualcomm QRB5165). You will be the person who builds the OS, keeps it secure, makes it reliable, and ships it through automated CI/CD pipelines. \\n\\nThe questions you&rsquo;ll be asked every day are ones like: Why did that service fail on boot? How do we strip this unnecessary network daemon out of the image without breaking the build graph? What&rsquo;s the fastest way to test a rootfs post-process change without waiting three hours for a full Yocto rebuild?\\n\\nThis is not a role for someone who has only worked at the application layer. We need someone comfortable navigating low-level OS internals, Yocto&rsquo;s BitBake machinery, systemd unit files, and the realities of headless embedded hardware with no display and limited recovery options.\\n\\n\\n\\n\\nEssential Duties and Responsibilities\\n\\n\\n\\n\\nYocto / BitBake Build System\\n\\n\\n\\tOwn and maintain the teal-mk2-build repository, including layer configuration, local.conf tuning, and image recipes that produce the qti-ubuntu-robotics-image.\\n\\tWrite and maintain .bb recipes and .bbappend overlays; create .patch files (git diff&ndash;based) against the pinned Qualcomm QRB5165 BSP (LU.UM.3.3.1) so that upstream sources are never modified directly.\\n\\tDebug BitBake task failures&mdash;understanding the do_fetch &rarr; do_compile &rarr; do_rootfs &rarr; do_image pipeline, sstate-cache behavior, and when to use -c cleansstate vs. -c rootfs -f.\\n\\tOptimize build performance: reduce full-build times by understanding QEMU emulation overhead vs. native ARM64 compilation, tuning BB_NUMBER_THREADS and PARALLEL_MAKE, and leveraging shared sstate-cache across Jenkins agents.\\n\\tManage package inclusion, exclusion (IMAGE_INSTALL:remove, PACKAGE_EXCLUDE, BAD_RECOMMENDATIONS), and inter-recipe dependency graphs.\\n\\n\\nRootfs Post-Processing &amp; OS Hardening\\n\\n\\n\\tImplement ROOTFS_POSTPROCESS_COMMAND functions to perform post-build OS customization: package upgrades, apt security patching (Ubuntu ESM), service installation, and file system fixups.\\n\\tRemove unnecessary services from production images&mdash;including HTTP servers (lighttpd), TFTP daemons, and other attack-surface-expanding services identified in Blue List / Nessus security assessments.\\n\\tWrite bash scripts and systemd service units that execute reliably in a headless, rootfs post-install context (no interactive terminal, limited /proc and /dev availability).\\n\\tManage the dpkg / apt ecosystem within the embedded rootfs: pinning packages, handling held packages, validating package state, and ensuring apt lock files are clean across incremental builds.\\n\\n\\nJenkins CI/CD Pipelines\\n\\n\\n\\tMaintain and improve Jenkins pipelines that build Yocto firmware images, including handling concurrent build isolation, artifact staging, and race conditions between parallel jobs.\\n\\tDiagnose and resolve Jenkins agent performance issues: Java heap tuning, Docker overlay2 disk pressure, container lifecycle management, and build environment reproducibility.\\n\\tImplement proper artifact copy patterns (stageDir isolation) to prevent race conditions when multiple builds run concurrently against shared directories.\\n\\tManage GitLab repository structure and branch protection for the build repo; implement .patch-based change workflows that preserve the integrity of pinned upstream BSP branches.\\n\\n\\nEmbedded Linux System Configuration\\n\\n\\n\\tConfigure systemd-networkd for runtime network mode switching (DHCP &harr; link-local) on headless devices using udev rules, button-press event handlers, and LED feedback mechanisms.\\n\\tWrite and maintain systemd service units and timers: understanding WantedBy, After, Requires, and ExecStart semantics for embedded boot sequences.\\n\\tImplement reliable USB logging and file transfer services (usb-gadget, udevadm) for field diagnostics on devices with no screen.\\n\\tDevelop and maintain Prometheus node_exporter integrations and process-exporter configurations for drone fleet health monitoring via Grafana dashboards.\\n\\n\\nSecurity &amp; Compliance\\n\\n\\n\\tRemediate Nessus / Blue List security findings affecting the embedded OS: SSH hardening (key-only auth, sshd_config tuning), open port reduction, and service inventory documentation.\\n\\tMaintain /etc/shadow hygiene, locked account policies, and PAM configurations appropriate for production embedded devices.\\n\\tGenerate and maintain security compliance artifacts (port inventories, service lists, patch status reports) for internal security assessors.\\n\\n\\nReliability &amp; Performance Tuning\\n\\n\\n\\tProfile and diagnose slow boot sequences, runaway processes, and memory pressure on ARM64 embedded hardware.\\n\\tUse screen, tmux, and remote shell tooling to manage long-running build and deployment sessions on headless servers and devices.\\n\\tImplement OS-level monitoring: log capture services, boot-time diagnostics, and watchdog patterns for unattended field deployment.\\n\\tAdvise on cloud build infrastructure choices (AWS Graviton / Azure ARM64) to eliminate QEMU emulation overhead and achieve 3&ndash;5&times; build time reductions.\\n\\n\\n\\n\\n\\nRequired Qualifications\\n\\n\\n\\n\\n\\n\\tBachelor&#39;s or master&#39;s degree in Computer Science, Computer Engineering, or a related field.\\n\\t5+ years of embedded Linux engineering experience, including direct ownership of Yocto/BitBake build systems (or similar) in a production environment.\\n\\tStrong proficiency with BitBake concepts: recipes (.bb), appends (.bbappend), image recipes, ROOTFS_POSTPROCESS_COMMAND, sstate-cache, and task dependency graphs.\\n\\tHands-on experience writing and applying .patch files against BSP/upstream sources to manage downstream customizations without modifying pinned branches.\\n\\tDeep knowledge of systemd: service units, network configuration (systemd-networkd, .network files), udev rules, and boot dependency ordering.\\n\\tProficiency in bash scripting for OS-level automation: apt/dpkg management, file system operations, LED/GPIO control, and headless device configuration.\\n\\tExperience with Ubuntu on ARM64 platforms, including ESM security patching, package management, and kernel/BSP integration.\\n\\tFamiliarity with Jenkins or equivalent CI/CD platforms: pipeline scripting, agent management, Docker-in-Docker build environments, and artifact handling.\\n\\tExperienced with SSH-based workflows, git patch workflows, and working entirely in headless terminal environments.\\n\\n\\n\\n\\n\\nAdditional Desired Qualifications\\n\\n\\n\\n\\n\\n\\tExperience with Qualcomm QRB5165 or similar robotics/drone SoC platforms and their associated BSP layers.\\n\\tExperience configuring Prometheus, node exporter, process-exporter, and Grafana for embedded device fleet monitoring.\\n\\tFamiliarity with Python Flask for internal tooling (device registration, fleet management dashboards).\\n\\tKnowledge of cross-compilation tools and methods.\\n\\tExperience with ADB (Android Debug Bridge) workflows for Qualcomm-based embedded targets.\\n\\tExposure to radio licensing and MAC-based device authentication workflows (e.g., Doodle Labs radios).\\n\\tHands-on experience in AWS Cloud management and infrastructure provisioning.\\n\\n\\n\\n\\n\\nPhysical Requirements and Working Conditions\\n\\n\\n\\n\\n\\n\\tMust be able to walk, stand, and navigate large indoor and outdoor facilities for extended periods of time.\\n\\tAbility to lift, carry, and move materials and equipment weighing up to 25 lbs on a regular basis.\\n\\tUse of personal protective equipment (PPE) may be required in designated areas or when performing specific tasks, in accordance with safety protocols and company policy.\\n\\tMay be required to climb ladders, stoop, kneel, or crouch during inspections, maintenance walk-throughs, or emergency response situations.\\n\\tRegular exposure to facility operations including noise, dust, temperature fluctuations, and industrial equipment.\\n\\tOccasional off-hours or weekend work required for emergency facility responses or projects as needed\\n\\tRequires frequent use of a computer and other standard office equipment for documentation, communication, and coordination tasks.\\n\\n\\n\\n\\n\\nBackground Check\\n\\nThis position will require successfully completing a post-offer background check. Qualified candidates with a criminal history will be considered and are not automatically disqualified, consistent with federal and state law.\\n\\nEEO and ITAR/EAR Work Authorization Disclosure\\n\\nRed Cat Holdings provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This position requires direct or indirect access to hardware, software, technology or technical data controlled under the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Successful candidates for positions subject to ITAR/EAR restrictions must provide proof of U.S. Citizenship or Permanent Residence and must not require sponsorship for export-restricted work authorization.\\n\\nE-Verify\\n\\nThe company participates E-Verify ensure eligibility for employment and compliance with Right to Work rules.\\n\\nCompensation: Salary plus generous annual equity package and potential bonuses.\\nQualifications\",\"responsibilities\":\"Position Summary\\n\\n\\n\\n\\nTeal Drones is looking for a hands-on Embedded OS Engineer to own the Ubuntu-based Linux firmware stack on our MK2 drone platform (Qualcomm QRB5165). You will be the person who builds the OS, keeps it secure, makes it reliable, and ships it through automated CI/CD pipelines. \\n\\nThe questions you&rsquo;ll be asked every day are ones like: Why did that service fail on boot? How do we strip this unnecessary network daemon out of the image without breaking the build graph? What&rsquo;s the fastest way to test a rootfs post-process change without waiting three hours for a full Yocto rebuild?\\n\\nThis is not a role for someone who has only worked at the application layer. We need someone comfortable navigating low-level OS internals, Yocto&rsquo;s BitBake machinery, systemd unit files, and the realities of headless embedded hardware with no display and limited recovery options.\\n\\n\\n\\n\\nEssential Duties and Responsibilities\\n\\n\\n\\n\\nYocto / BitBake Build System\\n\\n\\n\\tOwn and maintain the teal-mk2-build repository, including layer configuration, local.conf tuning, and image recipes that produce the qti-ubuntu-robotics-image.\\n\\tWrite and maintain .bb recipes and .bbappend overlays; create .patch files (git diff&ndash;based) against the pinned Qualcomm QRB5165 BSP (LU.UM.3.3.1) so that upstream sources are never modified directly.\\n\\tDebug BitBake task failures&mdash;understanding the do_fetch &rarr; do_compile &rarr; do_rootfs &rarr; do_image pipeline, sstate-cache behavior, and when to use -c cleansstate vs. -c rootfs -f.\\n\\tOptimize build performance: reduce full-build times by understanding QEMU emulation overhead vs. native ARM64 compilation, tuning BB_NUMBER_THREADS and PARALLEL_MAKE, and leveraging shared sstate-cache across Jenkins agents.\\n\\tManage package inclusion, exclusion (IMAGE_INSTALL:remove, PACKAGE_EXCLUDE, BAD_RECOMMENDATIONS), and inter-recipe dependency graphs.\\n\\n\\nRootfs Post-Processing &amp; OS Hardening\\n\\n\\n\\tImplement ROOTFS_POSTPROCESS_COMMAND functions to perform post-build OS customization: package upgrades, apt security patching (Ubuntu ESM), service installation, and file system fixups.\\n\\tRemove unnecessary services from production images&mdash;including HTTP servers (lighttpd), TFTP daemons, and other attack-surface-expanding services identified in Blue List / Nessus security assessments.\\n\\tWrite bash scripts and systemd service units that execute reliably in a headless, rootfs post-install context (no interactive terminal, limited /proc and /dev availability).\\n\\tManage the dpkg / apt ecosystem within the embedded rootfs: pinning packages, handling held packages, validating package state, and ensuring apt lock files are clean across incremental builds.\\n\\n\\nJenkins CI/CD Pipelines\\n\\n\\n\\tMaintain and improve Jenkins pipelines that build Yocto firmware images, including handling concurrent build isolation, artifact staging, and race conditions between parallel jobs.\\n\\tDiagnose and resolve Jenkins agent performance issues: Java heap tuning, Docker overlay2 disk pressure, container lifecycle management, and build environment reproducibility.\\n\\tImplement proper artifact copy patterns (stageDir isolation) to prevent race conditions when multiple builds run concurrently against shared directories.\\n\\tManage GitLab repository structure and branch protection for the build repo; implement .patch-based change workflows that preserve the integrity of pinned upstream BSP branches.\\n\\n\\nEmbedded Linux System Configuration\\n\\n\\n\\tConfigure systemd-networkd for runtime network mode switching (DHCP &harr; link-local) on headless devices using udev rules, button-press event handlers, and LED feedback mechanisms.\\n\\tWrite and maintain systemd service units and timers: understanding WantedBy, After, Requires, and ExecStart semantics for embedded boot sequences.\\n\\tImplement reliable USB logging and file transfer services (usb-gadget, udevadm) for field diagnostics on devices with no screen.\\n\\tDevelop and maintain Prometheus node_exporter integrations and process-exporter configurations for drone fleet health monitoring via Grafana dashboards.\\n\\n\\nSecurity &amp; Compliance\\n\\n\\n\\tRemediate Nessus / Blue List security findings affecting the embedded OS: SSH hardening (key-only auth, sshd_config tuning), open port reduction, and service inventory documentation.\\n\\tMaintain /etc/shadow hygiene, locked account policies, and PAM configurations appropriate for production embedded devices.\\n\\tGenerate and maintain security compliance artifacts (port inventories, service lists, patch status reports) for internal security assessors.\\n\\n\\nReliability &amp; Performance Tuning\\n\\n\\n\\tProfile and diagnose slow boot sequences, runaway processes, and memory pressure on ARM64 embedded hardware.\\n\\tUse screen, tmux, and remote shell tooling to manage long-running build and deployment sessions on headless servers and devices.\\n\\tImplement OS-level monitoring: log capture services, boot-time diagnostics, and watchdog patterns for unattended field deployment.\\n\\tAdvise on cloud build infrastructure choices (AWS Graviton / Azure ARM64) to eliminate QEMU emulation overhead and achieve 3&ndash;5&times; build time reductions.\\n\\n\\n\\n\\n\\nRequired Qualifications\\n\\n\\n\\n\\n\\n\\tBachelor&#39;s or master&#39;s degree in Computer Science, Computer Engineering, or a related field.\\n\\t5+ years of embedded Linux engineering experience, including direct ownership of Yocto/BitBake build systems (or similar) in a production environment.\\n\\tStrong proficiency with BitBake concepts: recipes (.bb), appends (.bbappend), image recipes, ROOTFS_POSTPROCESS_COMMAND, sstate-cache, and task dependency graphs.\\n\\tHands-on experience writing and applying .patch files against BSP/upstream sources to manage downstream customizations without modifying pinned branches.\\n\\tDeep knowledge of systemd: service units, network configuration (systemd-networkd, .network files), udev rules, and boot dependency ordering.\\n\\tProficiency in bash scripting for OS-level automation: apt/dpkg management, file system operations, LED/GPIO control, and headless device configuration.\\n\\tExperience with Ubuntu on ARM64 platforms, including ESM security patching, package management, and kernel/BSP integration.\\n\\tFamiliarity with Jenkins or equivalent CI/CD platforms: pipeline scripting, agent management, Docker-in-Docker build environments, and artifact handling.\\n\\tExperienced with SSH-based workflows, git patch workflows, and working entirely in headless terminal environments.\\n\\n\\n\\n\\n\\nAdditional Desired Qualifications\\n\\n\\n\\n\\n\\n\\tExperience with Qualcomm QRB5165 or similar robotics/drone SoC platforms and their associated BSP layers.\\n\\tExperience configuring Prometheus, node exporter, process-exporter, and Grafana for embedded device fleet monitoring.\\n\\tFamiliarity with Python Flask for internal tooling (device registration, fleet management dashboards).\\n\\tKnowledge of cross-compilation tools and methods.\\n\\tExperience with ADB (Android Debug Bridge) workflows for Qualcomm-based embedded targets.\\n\\tExposure to radio licensing and MAC-based device authentication workflows (e.g., Doodle Labs radios).\\n\\tHands-on experience in AWS Cloud management and infrastructure provisioning.\\n\\n\\n\\n\\n\\nPhysical Requirements and Working Conditions\\n\\n\\n\\n\\n\\n\\tMust be able to walk, stand, and navigate large indoor and outdoor facilities for extended periods of time.\\n\\tAbility to lift, carry, and move materials and equipment weighing up to 25 lbs on a regular basis.\\n\\tUse of personal protective equipment (PPE) may be required in designated areas or when performing specific tasks, in accordance with safety protocols and company policy.\\n\\tMay be required to climb ladders, stoop, kneel, or crouch during inspections, maintenance walk-throughs, or emergency response situations.\\n\\tRegular exposure to facility operations including noise, dust, temperature fluctuations, and industrial equipment.\\n\\tOccasional off-hours or weekend work required for emergency facility responses or projects as needed\\n\\tRequires frequent use of a computer and other standard office equipment for documentation, communication, and coordination tasks.\\n\\n\\n\\n\\n\\nBackground Check\\n\\nThis position will require successfully completing a post-offer background check. Qualified candidates with a criminal history will be considered and are not automatically disqualified, consistent with federal and state law.\\n\\nEEO and ITAR/EAR Work Authorization Disclosure\\n\\nRed Cat Holdings provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This position requires direct or indirect access to hardware, software, technology or technical data controlled under the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Successful candidates for positions subject to ITAR/EAR restrictions must provide proof of U.S. Citizenship or Permanent Residence and must not require sponsorship for export-restricted work authorization.\\n\\nE-Verify\\n\\nThe company participates E-Verify ensure eligibility for employment and compliance with Right to Work rules.\\n\\nCompensation: Salary plus generous annual equity package and potential bonuses.\\n\",\"employmentType\":\"OTHER\",\"hiringOrganization\":{\"@type\":\"Organization\",\"name\":\"RED CAT HOLDINGS\",\"logo\":\"https://www.paycomonline.net/v4/ats/web.php/application/style/logo?clientkey=DF82F4FEC533913CE59D380DC7829351\"},\"jobLocation\":{\"@type\":\"Place\",\"address\":{\"streetAddress\":\"2800 S West Temple Suite 2\",\"addressLocality\":\"SLC\",\"addressRegion\":\"UT\",\"postalCode\":84115,\"addressCountry\":\"USA\"}},\"validThrough\":\"-0001-11-30\"}",
    "applyAvailable": true,
    "educationLevel": "",
    "qualifications": "",
    "descriptionTitle": "Description",
    "travelPercentage": "",
    "jobYoutubeVideoId": "",
    "legalRevisionDate": {
      "date": "2025-07-11T19:04:21.000Z",
      "timezone": "America/Chicago",
      "timezone_type": 3
    },
    "secondaryLocations": [],
    "primaryPhoneCountry": "US",
    "primaryPhoneEnabled": false,
    "qualificationsTitle": "Qualifications",
    "primaryPhoneRequired": false,
    "primaryPhoneNumberDoesNotExist": false
  },
  "preview": {
    "jobId": 223933,
    "isHotJob": false,
    "jobTitle": "Embedded OS Engineer",
    "postedOn": "",
    "locations": "Teal Drones - SLC, UT 84115",
    "remoteType": "",
    "description": "Position Summary\n\n\n\n\nTeal Drones is looking for a hands-on Embedded OS Engineer to own the Ubuntu-based Linux firmware stack on our MK2 drone platform...",
    "positionType": ""
  },
  "detail_meta": {
    "url": "https://portal-applicant-tracking.us-cent.paycomonline.net/api/ats/job-postings/223933",
    "http_status": 200,
    "content_type": "application/json",
    "response_bytes": 49839
  },
  "detail_errors": []
}