Senior Security Engineer

About the role

We're looking for a technical architect-builder who can design and build security across our High-Performance Computing and GPU environments. This role requires deep experience with Linux internals and high-speed fabric isolation, as well as hands-on Infrastructure-as-Code and Kubernetes skills.

Responsibilities

• Architect and build security across the stack
• Partner with Core Architecture and DevOps on threat modeling, design reviews, and automated guardrails
• Harden the fabric, cradle to grave
• Own hardware lifecycle security across AMD Instinct clusters and high-speed fabrics (InfiniBand / RoCE)
• Build the code behind TPM 2.0 / Secure Boot, cryptographic attestation, and programmable trust
• Lead our open firmware security commitment
• Keep our OpenBMC, coreboot, and ROCm ecosystems continuously secure, auditable, and open
• Design and implement the tooling that makes hardware management transparent by default
• Engineer Zero-Trust IAM
• Design and implement least-privilege automation across the management plane, with identity-based micro-segmentation wired into our orchestration engines
• Make compliance push-button
• Act as the CISO's right hand scaling SOC2 and ISO 27001
• Replace manual evidence collection with continuous monitoring and "always-on" controls
• Operate as a purple teamer
• Think like an attacker, then ship the telemetry, detections, and hardening to close what you find
• Evangelize Security-as-Code
• Version-controlled policy, shift-left integration, self-healing infrastructure

Requirements

• Deep experience securing High-Performance Computing or large GPU environments, including Linux internals and high-speed fabric isolation (InfiniBand / RoCE)
• Strong coding chops in Go, Python, or Rust you build functions that run themselves rather than dashboards that need to be watched
• Hands-on with Infrastructure-as-Code (Terraform, Pulumi, Ansible) and Kubernetes at production scale
• Familiarity with hardware roots of trust: TPM 2.0, Secure Boot, measured boot, attestation
• Proven track record building Zero-Trust architectures and driving SOC2 / ISO 27001 programs toward automation
• Background in a fast-scaling startup or high-end security consultancy where you built things from scratch and then wrote the code to keep them secure
• Architect-builder mindset: equally comfortable in a whiteboard session and a pull request review