• Development and operation of a secure Linux-based platform for long-lived, networked display devices
• Protection of boot process, device storage, and update mechanisms against manipulation and operational failure
• Design of secure over-the-air updates with signatures, staged rollouts, and fallback mechanisms
• Integration of device identity, key management, and secure manufacturer provisioning
• Automation of build, signing, delivery, and operational processes with technical documentation for reviews

Work performed as part of an employment with Peer Stritzinger GmbH.

• Design and implementation of a secure embedded Linux platform for industrial controllers
• Protection of firmware, device secrets, and product know-how against manipulation, cloning, and uncontrolled access
• Architecture for secure boot, secure updates, device identity, and key management
• Integration of secure execution environments such as ARM TrustZone for sensitive functionality
• Integration of signing, provisioning, and production processes into an industrial manufacturing environment
• Technical support for security decisions with a focus on maintainability and product lifecycle

Work performed as part of an employment with Peer Stritzinger GmbH.

• Architecture and implementation of a Linux-based platform for industrial embedded products
• Protection of boot, update, and operational processes as a foundation for trustworthy devices
• Implementation of device identity, key management, and secure provisioning flows
• Integration of security mechanisms into build, signing, and deployment processes
• Documentation and technical handover for development, operation, and further product maintenance

Work performed as part of an employment.