Android Security Architect

At Quest Global, it’s not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.

Key Responsibilities

• Define and drive the end-to-end Android security architecture for devices and platforms.
• Lead design and implementation of Secure Boot chains and verified boot mechanisms.
• Architect and implement Remote Key Provisioning (RKP) and secure key management solutions.
• Oversee firmware and image signing processes, ensuring integrity and authenticity.
• Design and integrate solutions leveraging ARM TrustZone / TEE (Trusted Execution Environment).
• Ensure compliance with security standards and best practices across Android OS layers.
• Perform threat modeling, risk assessment, and vulnerability analysis for system-level security.
• Collaborate with cross-functional teams (hardware, firmware, OS, cloud) to ensure secure system integration.
• Drive security reviews, audits, and incident response strategies.
• Mentor and guide engineering teams on secure coding and architecture patterns.

We are known for our extraordinary people who make the impossible possible every day. Questians are driven by hunger, humility, and aspiration. We believe that our company culture is the key to our ability to make a true difference in every industry we reach. Our teams regularly invest time and dedicated effort into internal culture work, ensuring that all voices are heard.

We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas. We know embracing our unique differences makes us better, and that solving the worlds hardest engineering problems requires diverse ideas, perspectives, and backgrounds. We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference-makers in our workplace.

Required Skills & Expertise

• Strong expertise in Android Platform Security Architecture.
• Hands-on experience in:
  • Secure Boot / Verified Boot
  • Android Keystore / Keymaster / RKP (Remote Key Provisioning)
  • Image Signing & Certificate Management
  • TrustZone / TEE development
• Deep understanding of embedded systems security and hardware-backed security.
• Experience with cryptographic protocols, PKI, and key lifecycle management.
• Strong knowledge of Linux/Android internals, kernel security, SELinux policies.
• Familiarity with secure firmware development and OTA update mechanisms.
• Experience with vulnerability assessment tools and secure development lifecycle (SDL). 
• Ability to operate at architect level with strategic thinking.
• Strong stakeholder management and cross-team collaboration skills.
• Proven track record in leading large-scale security initiatives.
• Excellent problem-solving and decision-making capabilities.

Nice to Have

• Experience with Java/Kotlin (Android) and C/C++ (system-level development).
• Exposure to GoLang or backend integration for key provisioning systems.
• Knowledge of DevSecOps and security automation pipelines.
• Experience working with OEMs, chipset vendors, or mobile platform companies.
• Knowledge of Google Android Security requirements and compliance standards.