• Design, development, and operation of secure Linux-based operating systems for networked display devices (including Secure Boot and full disk encryption)
• Integration of heterogeneous device types (LED matrix displays, e-paper) with cellular connectivity
• Design and operation of secure over-the-air update processes (signed updates, staged rollouts, rollback mechanisms)
• Integration of hardware security modules and crypto processors for key and identity protection
• Setup of a private PKI and a secure provisioning pipeline at the manufacturer (flashing, certificates, Secure Boot activation)
• Automation of build, signing, and update pipelines including CI/CD integration, monitoring, and second-level support

Work performed as part of an employment with Peer Stritzinger GmbH.

• Design and implementation of secure embedded Linux platforms for industrial control systems
• Securing boot, runtime, and update processes to protect against tampering and industrial espionage
• Design and operation of secure over-the-air update processes for industrial controllers
• Establishment and use of hardware-backed device identities, trust chains, and certificate and key management
• Integration of hardware-backed build, signing, and provisioning processes into industrial production environments

Work performed as part of an employment with Peer Stritzinger GmbH.

• Architecture and implementation of a Linux-based embedded platform for industrial control systems
• Securing boot, runtime, and update processes
• Design and operation of secure over-the-air update processes
• Implementation of hardware-backed identity and trust models including key and certificate management
• Integration of hardware-backed build, signing, and provisioning processes

Work performed as part of an employment.