Note: The job is a remote job and is open to candidates in USA. Groq is hiring a Sr. Staff Platform Security Engineer, Confidential Computing to build hardware-rooted security foundations for sensitive AI workloads. The role sets technical direction and designs security capabilities across hardware, firmware, systems software, attestation, trusted execution environments, and protected workload execution.
Responsibilities
- Set technical direction and own architecture for security capabilities spanning hardware, firmware, systems software, and protected workload execution
- Design and build security architectures for hardware-rooted trust, attestation, trusted execution environments, and hardware-backed isolation
- Architect attestation capabilities that establish and verify trust across hardware, firmware, host, and workload boundaries
- Partner deeply with hardware, firmware, and systems engineers to shape platform integrity, secure and measured boot, device identity, and other hardware-rooted security capabilities
- Design security capabilities that enable protected workload execution while maintaining trust throughout the workload lifecycle
- Design secure approaches for cryptographic key material, credentials, identity, certificates, and provisioning within trusted computing environments
- Shape security for the lifecycle of trusted compute infrastructure, from provisioning and platform initialization through operation and decommissioning
- Lead threat modeling and security analysis across hardware, firmware, host software, and workload execution, identifying systemic risks and driving durable mitigations
- Develop systems software, security tooling, and automation that make hardware-backed security capabilities reliable and operable at scale
- Lead security-sensitive designs across organizational boundaries, translating complex hardware and systems risks into practical engineering decisions
- Establish technical patterns and influence security direction across hardware, firmware, systems, platform, and security engineering
- Partner across engineering and security to build capabilities that strengthen customer trust, platform reliability, and support compliance requirements
- Clearly communicate trust models, security architecture, technical tradeoffs, and risk to engineers, technical leaders, and security leadership
Skills
- 6+ years of systems, firmware, hardware, or security engineering experience, with deep expertise in low-level systems security and experience with hardware-rooted trust, attestation, trusted execution environments, confidential computing, or related technologies
- Demonstrated experience setting technical direction and owning complex security architecture spanning multiple layers of the hardware and software stack
- Deep expertise in firmware security, hardware-rooted trust, attestation, trusted execution environments (TEEs), protected workload execution, or closely related low-level security domains
- Deep understanding of hardware-rooted trust, including roots of trust, platform integrity, secure or measured boot, device identity, and hardware-backed attestation
- Experience designing or implementing attestation systems and reasoning about trust across hardware, firmware, host, and workload boundaries
- Strong understanding of firmware and low-level systems security, including boot chains, platform integrity, and security boundaries between hardware and software
- Strong understanding of cryptographic systems, key management, certificate lifecycle, secure credential management, and secure provisioning in trusted computing environments
- Strong systems engineering skills, with experience developing low-level systems software, security tooling, firmware, or production automation in languages such as C, C++, Rust, Go, Python, or similar languages
- Ability to threat model complex systems and reason about attacks spanning hardware, firmware, operating systems, infrastructure, and application workloads
- Experience leading ambiguous, cross-functional technical initiatives and influencing engineering direction across highly specialized engineering disciplines
- Ability to communicate complex trust models, security architecture, and technical risk clearly to different audiences
- Must qualify as U.S. Persons for export control purposes (i.e., U.S. citizen, U.S. lawful permanent resident (Green Card holder), or a protected individual under 8 U.S.C. § 1324b(a)(3) such as a refugee or asylee), or otherwise be eligible for an applicable export license
- Candidates for this role must meet all relevant export control eligibility criteria
- Experience developing or securing firmware, platform initialization, device security, or hardware-backed security mechanisms is valuable
- Experience integrating hardware-rooted trust, attestation, or confidential computing capabilities with higher-level infrastructure, identity, key-management, or workload systems is valuable
- Experience with bare-metal lifecycle security or securing large-scale compute environments is valuable
Benefits
- Flexibility to work remotely while we establish our local Groq office; this role will transition to onsite once the office opens.
- Long-Term Incentive (LTI) Program
Company Overview