Distinguished Technologist - Principal Architect, Platform Security and Firmware Systems
About The Position
HP is seeking a senior technical leader to serve as a lead architect for hardware rooted Platform Root of Trust for HP's commercial PC platform. In this role, you will be responsible for envisioning, defining, and driving the architecture of hardware, firmware, software, and cloud-integrated security capabilities that protect HP commercial PCs from current and emerging threats. You will also work across the hardware and security architecture teams, collaborate with HP's Security Research Labs, Firmware (BIOS) team, our security business that creates and deploys industry leading enterprise security and manageability solutions, product management, manufacturing, supply chain, customer enablement, and field organizations to create cohesive system solutions that deliver unique customer value. This position requires deep expertise in embedded systems, platform firmware, hardware, security, device manageability, and PC system architecture. The role also requires the ability to translate complex technical capabilities into customer-relevant value propositions and to influence internal and external stakeholders without relying solely on formal authority.
Requirements
- Recommended Bachelor’s degree in Electrical Engineering, Computer Engineering, Computer Science, or equivalent practical experience.
- Extensive experience in PC, embedded, firmware, hardware, or platform system architecture, preferably in commercial client systems or security-sensitive devices.
- Demonstrated ability to architect solutions that span hardware, firmware, software, cloud services, manufacturing, and customer deployment environments.
- Deep technical understanding of BIOS/UEFI, embedded controllers, secure boot, firmware update and recovery flows, cryptographic signing, PKI based device identity, attestation, and secure configuration management.
- Experience defining product requirements, writing technical specifications, driving proof-of-concepts, and influencing roadmap decisions across multiple engineering teams.
- Ability to communicate complex technical ideas clearly to executive, engineering, customer, sales, and field audiences.
- Proven ability to lead through influence in a matrixed organization and to resolve ambiguity across competing business, technical, and customer priorities.
Nice To Haves
- Experience with hardware based roots of trust, platform certificates, DICE/SPDM concepts, supply-chain assurance, quantum-safe cryptography, secure element or embedded security controller identity, and compliance or certification frameworks.
- Experience with enterprise endpoint manageability platforms such as Intune, SCCM, device-management consoles, or cloud-based key management services.
- Hands-on capability with scripting or development tools such as PowerShell, C#, Python, Java, GitHub, Visual Studio Code, or similar environments.
- Experience with customer-facing technical briefings, sales enablement, competitive analysis, standards participation, patent development, or external security ecosystem collaboration.
- Familiarity with commercial PC platform architecture, silicon vendor security technologies, Windows platform security, docking, peripheral security, battery authentication, telemetry, and right-to-repair considerations.
Responsibilities
- Serve as principal architect for HP Endpoint Security Controller roadmap, associated hardware and firmware based capabilities, cryptographic identity, attestation, secure communication, event logging, and future controller generations.
- Define and evolve HP Sure Start architecture and related firmware resilience capabilities, including hardware-enforced firmware authenticity, recovery, update, and protection mechanisms.
- Drive secure BIOS and firmware configuration management strategies, including HP Sure Admin ecosystem capabilities, key management, zero-touch provisioning, customer deployment models, and integration with enterprise management tools.
- Lead cross-functional architecture definition across hardware, BIOS, embedded controller firmware, diagnostics, cloud services, client software, manageability tools, product management, and customer-facing teams.
- Anticipate emerging threats and technology shifts, including quantum-safe cryptography, platform attestation, supply-chain security, physical tamper resistance, peripheral authentication, and new non-volatile memory architectures.
- Partner with silicon vendors, operating-system providers, standards organizations, internal and external security research teams, and internal product teams to influence and align platform security direction.
- Support customer briefings, field escalations, competitive positioning, technical marketing, training events, and executive communications related to HP commercial PC platform security.
- Create specifications, proof-of-concepts, validation tools, scripts, demonstrations, and reference implementations that accelerate adoption of new security capabilities.
- Mentor engineers and technical leaders by sharing architectural context, reviewing designs, developing talent, and helping teams make practical tradeoffs among security, cost, schedule, customer experience, and portfolio impact.
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- Long term/short term disability insurance
- Employee assistance program
- Flexible spending account
- Life insurance
- Generous time off policies, including; 4-12 weeks fully paid parental leave based on tenure
- 11 paid holidays
- Additional flexible paid vacation and sick leave
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
