Confidential Compute Systems Engineer
Job Summary
Job Description
We are developing software, firmware, and hardware to advance the RISC-V ecosystem and create secure-by-design RISC-V based systems. The security team defines security requirements for hardware and software teams, ensuring secure designs for RISC-V. As a confidential compute engineer, you will develop software and firmware for high-performance RISC-V systems to meet security and privacy requirements, protecting sensitive customer data in multi-tenant environments. This role involves enabling Trusted Execution Environments for RISC-V platforms and positions are available for full-time roles in confidential compute aspects of simulators, OS/hypervisors, orchestration, tools, and application runtimes. You will learn to write performant and readable code, structure and communicate projects, and collaborate effectively with the Open Source community. We actively contribute improvements back to the open-source projects we utilize.
Must have:
- Design and develop APIs, protocols, and services for confidential compute systems.
- Modify/Extend open-source OS/hypervisors for confidential workload security.
- Create, Implement, Release, and Manage open source SDKs, APIs.
- Design and develop cryptographic services.
- Contribute to open source projects and drive open standards.
- Debug large scale workload issues.
- Implement platform security standards (Confidential Compute Consortium, PCIe, CXL, DMTF, TCG).
- Experience with large scale multi-tenant security products.
- Experience in large scale open-source projects (e.g., Kubernetes, Kata).
- Assembly/C/C++ experience.
- Strong SW development fundamentals (system software, multi-processor systems, caching, virtual memory).
- Demonstrated grasp of applied cryptography.
- Excellent problem-solving and communication skills.
- Ability to work well in a team and meet aggressive schedules.
Good to have:
- Rust experience.
- Experience with PKI lifecycle management.
- Experience with RISC-V and Domain-specific architectures.
5 skills required
Job Details
We are working on software, firmware and hardware to evolve the RISC-V ecosystem and build secure-by-design RISC-V based systems.
The security team has the charter to define security requirements for the hardware teams and software teams. We are responsible for providing secure designs for RISC-V as we bring our product vision to life. As a confidential compute engineer on our team, you will develop software and firmware for a high-performance RISC-V-based System to ensure security and privacy requirements are met, for protecting sensitive customer data in multi-tenant environments. You will contribute to enabling Trusted Execution Environments for RISC-V based platforms.
Positions are open for full-time roles in the areas of confidential compute aspects of simulators, OS/hypervisor, orchestration, tools and application runtimes to support TEE workloads.
You will be learning technical and organizational skills from industry veterans: how to write performant and readable code; how to structure and communicate projects, ideas, and progress; how to work effectively with the Open Source community.
We are big proponents of Open Source software and contribute back our improvements to all the great projects we use.
Responsibilities
- Design and develop APIs, protocols and services for a multi-tenant confidential compute system.
- Modify/Extend open source OS/hypervisors for specialized hardware to support confidential workload security extensions
- Create, Implement, Release, and Manage open source Software Development Kits (SDKs), APIs.
- Design and develop cryptographic services for licensing, key management, signing, etc for end-to-end solutions
- Contribute to open source projects and drive open standards for confidential compute interoperability
- Debug large scale workload issues, working in conjunction with other software and hardware engineering teams.
- Implementing required support for platform security standards within Confidential Compute Consortium, PCIe, CXL, DMTF, TCG etc.
Requirements
- Experience with large scale multi-tenant security products (i.e. threat detection, identity and access, data security, KMS, HSM, Confidential computing).
- Experience in large scale open-source projects using multi-tenant environments such as Container runtimes (e.g. Kubernetes, Kata)
- Assembly/C/C++ experience; Rust experience is not necessary, but a plus.
- Strong SW development fundamentals, including system software, multi-processor systems, caching and virtual memory.
- Demonstrated grasp of applied cryptography.
- Experience with PKI lifecycle management is a plus.
- Experience with RISC-V and Domain-specific architectures is a plus but not required.
- Excellent skills in problem solving, written and verbal communication, excellent organization skills, and highly self-motivated.
- Ability to work well in a team and be productive under aggressive schedules.
Education and Experience
- PhD, Master’s Degree or Bachelor’s Degree in technical subject area.
Similar Jobs
Ion
Jersey City, New Jersey, United States (On-Site)
• 8 Months ago
Qualcomm
Hyderabad, Telangana, India (On-Site)
• 2 Weeks ago
Apple
Sunnyvale, California, United States (On-Site)
• 3 Weeks ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
bytedance
Seattle, Washington, United States (On-Site)
• 6 Months ago
bytedance
Seattle, Washington, United States (On-Site)
• 3 Months ago
bytedance
Seattle, Washington, United States (On-Site)
• 8 Months ago
Get notifed when new similar jobs are uploaded
Jobs in Santa Clara, California, United States
Cambridge, Massachusetts, United States (On-Site)
• 2 Months ago
Axon
Sterling, Virginia, United States (Hybrid)
• 1 Month ago
Nexon
El Segundo, California, United States (Hybrid)
• 1 Month ago
Get notifed when new similar jobs are uploaded
System Design Jobs
Open Systems Technologies
Düsseldorf, North Rhine-Westphalia, Germany (On-Site)
• 1 Week ago
GoMotive
United States (Remote)
• 3 Months ago
NVIDIA
Toronto, Ontario, Canada (Hybrid)
• 3 Months ago
Get notifed when new similar jobs are uploaded
