Systems Software Engineer, Security, First Party Hardware

Highlights

• Own end-to-end security foundation for first-party AI hardware systems.
• Define device trust from boot integrity to decommissioning at data center scale.
• Help deliver faster, efficient hardware for OpenAI supercomputing platform.

What they offer

• Equity
• Relocation assistance

Ideal candidate

A systems-minded security owner who thrives in ambiguity and loves securing real hardware from silicon to data center scale, partnering across engineering and manufacturing to ship trusted platforms.

Requirements

• 7+ years of hands-on experience, or exceptional accomplishments demonstrating equivalent expertise, in hardware security, embedded security, firmware security, platform security, or low-level systems security.
• Experience shipping or securing real hardware platforms, embedded devices, servers, accelerators, networking systems, BMCs, bootloaders, BIOS/UEFI, RTOS, kernels, or firmware update systems.
• Deep familiarity with secure boot, measured boot, TPMs, hardware roots of trust, device attestation, key provisioning, debug interfaces, firmware signing, recovery, or lifecycle-state design.
• Strong applied-cryptography judgment for secure boot, attestation, TLS/mTLS, key storage, certificate lifecycle, storage encryption, and long-range transitions such as post-quantum readiness.
• Ability to read and write systems code in C, C++, or Rust and to use that skill to review, prototype, test, or debug security-critical behavior.
• Comfort with hardware-software interfaces such as SPI, I2C, SMBus, PCIe, UART, JTAG, SWD, GPIOs, TPMs, and board-level debug tools.
• Proven track record driving security improvements with hardware, firmware, infrastructure, manufacturing, operations, and partner teams.
• Experience owning broad, ambiguous security programs end to end, including translating risk into technical requirements, validation plans, and accountable engineering decisions.
• Clear written and verbal communication, with the ability to turn ambiguous security risks into actionable requirements, design reviews, tests, and decisions.