The opportunity
Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience
What you'll do
Own the integrity roadmap: threat model from silicon and firmware up through the operating system and workloads, decide what to build, and deliver it
Be able to reason about the design and implementation of remote attestation,: measured and verified boot, hardware roots of trust (TPM, SPDM), machine identity, and the reference values that define known-good
Make attestation the default path, so machines receive credentials and join: clusters only after proving their firmware, system software, and security configuration, with no human in the loop
Build provenance for what we deploy: signed build artifacts and model weights, independent verification, and tamper-evident transparency logs
Lead the protection of sensitive data in use and at rest, including: encryption and the chokepoints that control access to it
Secure the server management plane across every site: scoped and audited access to baseboard management controllers and management of per-device credentials
What they're looking for
- Make security repeatable as compute grows, so a new site or hardware platform: inherits these controls in hours, not weeks
- Join compute bring-up, data center, and hardware teams at design time
- Define clear ownership with partner teams: when operations move to another team, your team keeps the security properties and can prove they still hold
- Own the integrity evidence for our security goals and compliance: the invariants hold, and you can prove it
