Confidential Computing

Confidential Computing Engineer Jobs

2 jobs found

Today

Senior/Staff Security Engineer

Sandbar New York, NY

New York, NY

Today

$190k - $260k/yr Full time Senior Application Security Audit Logging

Apply Now

Job Description

Sandbar is hiring a Senior/Staff Security Engineer to own backend security systems that make user privacy real for Stream, working from inside a small backend team on a live production service.

Responsibilities

Design and ship end-to-end encryption for user data, including key management, while keeping search and background processing working on encrypted data
Build confidential-computing infrastructure to isolate and verify sensitive processing, including attestation and reproducible builds
Own identity and secrets across the stack, including short-lived workload credentials, least-privilege service identities, environment isolation, and auditable privileged access
Own supply chain and CI/CD security
Build the detection and response loop with audit logging, alerting, runbooks, and post-incident reviews that drive engineering changes
Drive security for vendors and data handling, including AI provider data agreements, third-party integration and OAuth scope review, plus data retention and deletion
Lead compliance work (for example, SOC 2) from the engineering side, with controls enforced by systems and evidence generated automatically
Contribute a share of the core backend, building product features on the real-time Python services you secure and reviewing team changes with a security focus
Set direction for secure engineering practice through design reviews, threat models, and clear, minimal guidance engineers follow

Requirements

7+ years building and operating backend systems, including meaningful time as the engineer accountable for security on a production service
Strong Python skills and comfort owning a live, real-time service end to end
Hands-on applied cryptography, including envelope encryption, authenticated encryption, key hierarchies, and understanding practical failure modes
Deep cloud security experience on AWS and/or GCP, including IAM, workload identity federation, KMS, secrets management, and audit logging
Experience leading incident response on a production service, from containment through follow-up hardening
Experience with confidential computing or attestation (e.g. Nitro Enclaves, SEV-SNP, TDX, App Attest) strongly preferred
Comfortable with document stores and their access-control models
Ability to make tradeoffs explicitly and ship, understanding differences between controls that gate launch versus controls that can be followed
Precise communication with engineers, founders, auditors, and vendors

Technologies

Python
AWS, GCP
IAM, workload identity federation
KMS, secrets management, audit logging
Nitro Enclaves, SEV-SNP, TDX, App Attest
OAuth

Benefits

Health, vision, and dental benefits
Company-sponsored 401(k)
Unlimited PTO and sick time
Early stage equity

Nice to Have

iOS security primitives (Secure Enclave, Keychain)
Bluetooth LE device security, firmware signing, or secure pairing
Experience with retrieval systems or LLM infrastructure and their data-flow controls
SOC 2 or ISO 27001 audit experience from the engineering side

Location: New York, NY (onsite)
Salary: USD 190,000 - 260,000 per year
Experience: 7+ years

View full job page →

8d ago

Sr. Staff Platform Security Engineer, Confidential Computing

Groq San Francisco Bay Area, CA

San Francisco Bay Area, CA

8d ago

$341k - $402k/yr Full time Confidential Computing Hardware Security Security Engineer

Apply Now

Job Description

Groq is hiring a Sr. Staff Platform Security Engineer to build hardware-rooted security foundations that help protect sensitive AI workloads across both hardware and software boundaries. In this hybrid role in the San Francisco Bay Area, you will set technical direction and lead security architecture across firmware, hardware trust, attestation, trusted execution environments (TEEs), and protected workload execution, partnering closely with engineering teams at the foundation of the computing stack.

What you will do

Own and set technical direction for security capabilities spanning hardware, firmware, systems software, and protected workload execution.
Design and build security architectures for hardware-rooted trust, including attestation, trusted execution environments (TEEs), and hardware-backed isolation.
Architect attestation capabilities that establish and verify trust across hardware, firmware, host, and workload boundaries.
Partner with hardware, firmware, and systems engineers to shape platform integrity, secure and measured boot, device identity, and other hardware-rooted security capabilities.
Design security approaches that enable protected workload execution while maintaining trust across the workload lifecycle.
Create secure cryptographic designs for key material, credentials, identity, certificates, and provisioning within trusted computing environments.
Shape trusted compute infrastructure security across the full lifecycle, from provisioning and platform initialization through operation and decommissioning.
Lead threat modeling and security analysis across hardware, firmware, host software, and workload execution, identifying systemic risks and driving durable mitigations.
Develop systems software, security tooling, and automation so hardware-backed security capabilities are reliable and operable at scale.
Lead security-sensitive designs across organizational boundaries by translating complex hardware and systems risks into practical engineering decisions.
Establish technical patterns and influence security direction across hardware, firmware, systems, platform, and security engineering.
Communicate trust models, security architecture, technical tradeoffs, and risk to engineers, technical leaders, and security leadership.

What you bring

6+ years of systems, firmware, hardware, or security engineering experience, with deep expertise in low-level systems security and experience with hardware-rooted trust, attestation, TEEs, confidential computing, or related technologies.
Proven ability to set technical direction and own complex security architecture across multiple layers of the hardware and software stack.
Deep expertise in firmware security, hardware-rooted trust, attestation, trusted execution environments, protected workload execution, or related low-level domains.
Strong understanding of hardware-rooted trust concepts including roots of trust, platform integrity, secure or measured boot, device identity, and hardware-backed attestation.
Experience designing or implementing attestation systems and reasoning about trust across hardware, firmware, host, and workload boundaries.
Strong firmware and low-level systems security knowledge, including boot chains, platform integrity, and security boundaries between hardware and software.
Strong understanding of cryptographic systems, including key management, certificate lifecycle, secure credential management, and secure provisioning in trusted computing environments.
Systems engineering experience building low-level systems software, security tooling, firmware, or production automation in C, C++, Rust, Go, Python, or similar languages.
Ability to threat model complex systems and reason about attacks spanning hardware, firmware, operating systems, infrastructure, and application workloads.
Experience leading ambiguous, cross-functional technical initiatives and influencing direction across highly specialized engineering disciplines.
Ability to communicate complex trust models, security architecture, and technical risk clearly to different audiences.

Technologies

C
C++
Rust
Go
Python
Confidential computing
Trusted execution environments (TEEs)

Benefits

Long-Term Incentive (LTI) Program
Robust suite of employee benefits

Mission

Build hardware-rooted security foundations that protect sensitive AI workloads across hardware and software boundaries.
Set technical direction and build security capabilities spanning firmware security, hardware trust, attestation, trusted execution environments, and protected workload execution.
Work close to the hardware layer and partner across hardware, firmware, systems, platform, and security engineering to solve security challenges at the foundation of the computing stack.

Location and work style

This role is based in one of Groq’s three hiring hubs: the Dallas, San Francisco, or New York City area. The person hired must be based in one of these areas. Flexibility to work remotely is available while a local Groq office is established, with an expectation the role will transition onsite once the office opens.

Compensation

Total cash salary range (inclusive of potential bonus value): $341,400 - $401,600.
Range is specific to candidates located in the United States.
Compensation for international candidates will vary based on local market dynamics.
Groq includes potential bonus value directly into base pay through its Total Cash philosophy.

Additional information

Export controls: This position may require access to technology/information subject to U.S. export control laws (EAR). Candidates must qualify as U.S. Persons for export control purposes or be eligible for an applicable export license.
Equal opportunity and accommodations: Groq is an Equal Opportunity Employer and committed to providing reasonable accommodations to qualified individuals. Requests for accommodations can be sent to talent@groq.com (for accommodation requests only).
Fair chance: Groq encourages applications from people with criminal record histories in accordance with the California Fair Chance Act and related ordinances.
AI in hiring: Groq may use AI tools to assist with application review, evaluating qualifications, scheduling interviews, analyzing assessment responses, or supporting recruiting operations. Hiring decisions are subject to human review. Candidates may request accommodations or additional information about AI use by contacting ta-operations@groq.com.
Offer contingency: Offers are contingent on verification of identity and employment authorization in accordance with federal law.

View full job page →

Confidential Computing Engineer Jobs

Senior/Staff Security Engineer

Sr. Staff Platform Security Engineer, Confidential Computing

Get Confidential Computing Engineer Jobs alerts