[Remote] Sr. Staff Platform Security Engineer, Confidential Computing

Note: The job is a remote job and is open to candidates in USA. Groq is hiring a Sr. Staff Platform Security Engineer, Confidential Computing to build hardware-rooted security foundations for sensitive AI workloads. The role sets technical direction and designs security capabilities across hardware, firmware, systems software, attestation, trusted execution environments, and protected workload execution.

Responsibilities

• Set technical direction and own architecture for security capabilities spanning hardware, firmware, systems software, and protected workload execution
• Design and build security architectures for hardware-rooted trust, attestation, trusted execution environments, and hardware-backed isolation
• Architect attestation capabilities that establish and verify trust across hardware, firmware, host, and workload boundaries
• Partner deeply with hardware, firmware, and systems engineers to shape platform integrity, secure and measured boot, device identity, and other hardware-rooted security capabilities
• Design security capabilities that enable protected workload execution while maintaining trust throughout the workload lifecycle
• Design secure approaches for cryptographic key material, credentials, identity, certificates, and provisioning within trusted computing environments
• Shape security for the lifecycle of trusted compute infrastructure, from provisioning and platform initialization through operation and decommissioning
• Lead threat modeling and security analysis across hardware, firmware, host software, and workload execution, identifying systemic risks and driving durable mitigations
• Develop systems software, security tooling, and automation that make hardware-backed security capabilities reliable and operable at scale
• Lead security-sensitive designs across organizational boundaries, translating complex hardware and systems risks into practical engineering decisions
• Establish technical patterns and influence security direction across hardware, firmware, systems, platform, and security engineering
• Partner across engineering and security to build capabilities that strengthen customer trust, platform reliability, and support compliance requirements
• Clearly communicate trust models, security architecture, technical tradeoffs, and risk to engineers, technical leaders, and security leadership

Skills

• 6+ years of systems, firmware, hardware, or security engineering experience, with deep expertise in low-level systems security and experience with hardware-rooted trust, attestation, trusted execution environments, confidential computing, or related technologies
• Demonstrated experience setting technical direction and owning complex security architecture spanning multiple layers of the hardware and software stack
• Deep expertise in firmware security, hardware-rooted trust, attestation, trusted execution environments (TEEs), protected workload execution, or closely related low-level security domains
• Deep understanding of hardware-rooted trust, including roots of trust, platform integrity, secure or measured boot, device identity, and hardware-backed attestation
• Experience designing or implementing attestation systems and reasoning about trust across hardware, firmware, host, and workload boundaries
• Strong understanding of firmware and low-level systems security, including boot chains, platform integrity, and security boundaries between hardware and software
• Strong understanding of cryptographic systems, key management, certificate lifecycle, secure credential management, and secure provisioning in trusted computing environments
• Strong systems engineering skills, with experience developing low-level systems software, security tooling, firmware, or production automation in languages such as C, C++, Rust, Go, Python, or similar languages
• Ability to threat model complex systems and reason about attacks spanning hardware, firmware, operating systems, infrastructure, and application workloads
• Experience leading ambiguous, cross-functional technical initiatives and influencing engineering direction across highly specialized engineering disciplines
• Ability to communicate complex trust models, security architecture, and technical risk clearly to different audiences
• Must qualify as U.S. Persons for export control purposes (i.e., U.S. citizen, U.S. lawful permanent resident (Green Card holder), or a protected individual under 8 U.S.C. § 1324b(a)(3) such as a refugee or asylee), or otherwise be eligible for an applicable export license
• Candidates for this role must meet all relevant export control eligibility criteria
• Experience developing or securing firmware, platform initialization, device security, or hardware-backed security mechanisms is valuable
• Experience integrating hardware-rooted trust, attestation, or confidential computing capabilities with higher-level infrastructure, identity, key-management, or workload systems is valuable
• Experience with bare-metal lifecycle security or securing large-scale compute environments is valuable

Benefits

• Flexibility to work remotely while we establish our local Groq office; this role will transition to onsite once the office opens.
• Long-Term Incentive (LTI) Program

Company Overview