Engineering Manager, Integrity and Attestation

Anthropic•Seattle, WA

9d•Hybrid

About The Position

Anthropic is hiring an Engineering Manager to lead the Integrity and Attestation team. The team builds systems that cryptographically verify build artifacts, model weights, and machines—from hardware roots of trust through firmware and boot to workload credentials—and secures the server management plane. Its controls protect model weights and customer data across cloud providers and bare-metal AI data centers, including partner-operated sites. The manager will set the team's charter, practices, priorities, and integrity roadmap as Anthropic brings up compute across new hardware platforms and partners. The role partners with infrastructure, data center, and hardware teams and external vendors to design integrity into systems from the outset. The goal is for machines to receive secrets and workloads only after proving they meet requirements, while enabling new sites to reach that standard without slowing compute. The role also leads and develops senior security software engineers, establishes team practices as the organization scales, and owns evidence that security goals and compliance requirements are met.

Requirements

Experience managing infrastructure or security engineering teams, including hiring, developing, and managing senior and staff engineers.
Experience growing engineers into staff or lead roles and with performance management.
Experience building and maintaining a high-performing team in a hypergrowth environment and sustaining delivery through reorganizations, charter changes, or leadership turnover.
Experience owning a security or infrastructure domain end to end, including setting multi-year strategy, delivering year-long cross-organizational work with little direction, and communicating risk and tradeoffs to executives.
Appreciation for distributed systems and properties beyond security, including reliability, efficiency, and maintainability.
Experience scaling a team and its systems together through hypergrowth.
Hands-on engineering experience in at least one of platform security, secure boot and firmware, hardware roots of trust, confidential computing, or software supply chain integrity.
Experience threat-modeling and assessing risk for systems spanning hardware and software, with sound security judgment and pragmatism.
Ability to lead through ambiguity with multiple partner teams and outside vendors, without controlling hardware or schedules.
Low ego and high empathy; experience building diverse teams and former reports who would vouch for you.
Clear and persuasive written and verbal communication.
Bachelor's degree or an equivalent combination of education, training, and/or experience; a relevant field of study demonstrated through coursework, training, or professional experience.
At least 5 years managing engineering teams and 8 years of hands-on platform, infrastructure, or security engineering experience are identified as a good-fit qualification.

Nice To Haves

Built or operated remote attestation, device identity, or fleet-wide boot integrity at production scale.
Worked with BMCs, Redfish, GPU or accelerator attestation, or large-scale bare-metal provisioning.
Experience with Nitro, SEV-SNP, TDX, or similar confidential computing platforms.
Built signing, provenance, or transparency systems such as Sigstore, SLSA, or binary transparency.
Designed key management or offline ceremonies for high-value secrets.
Worked in high-assurance environments where controls had to be evidenced, not just deployed.
Taken infrastructure from zero to one and matured it into a hardened system on which other teams depend.
Built or rebuilt a hiring loop and maintained hiring standards while growing headcount quickly.
Pragmatic and steady approach that balances unblocking research, product, and compute with sound architecture, and patience and judgment when working with opinionated senior engineers.
Familiarity with AI security and safety concepts.

Responsibilities

Set the team's charter, practices, priorities, and integrity roadmap.
Threat-model systems from silicon and firmware through operating systems and workloads; choose what to build and deliver it.
Reason about and guide the design and implementation of remote attestation, measured and verified boot, hardware roots of trust (including TPM and SPDM), machine identity, and known-good reference values.
Make attestation the default path so machines receive credentials and join clusters only after proving their firmware, system software, and security configuration, without human intervention.
Build provenance for deployed artifacts and model weights, including signed artifacts, independent verification, and tamper-evident transparency logs.
Lead protection of sensitive data in use and at rest, including encryption and controls over access.
Secure the server management plane across sites, including scoped and audited access to baseboard management controllers and per-device credential management.
Make security controls repeatable as compute grows so new sites and hardware platforms can inherit them quickly.
Partner with compute bring-up, data center, and hardware teams during design.
Define ownership with partner teams and ensure security properties remain in place and provable when operational responsibilities move.
Own integrity evidence for security goals and compliance, demonstrating that required invariants hold.
Hire, grow, and retain senior security software engineers; manage their career development and establish the team's operating practices.