Engineering Manager, Integrity and Attestation

Anthropic•San Francisco, WA

8d•Hybrid

About The Position

Anthropic is hiring an Engineering Manager to lead its Integrity and Attestation team. The team builds systems that verify what is running at Anthropic, where it came from, and whether the underlying machine is in a known-good state. Its work includes cryptographic verification of build artifacts, model weights, and machines; hardware roots of trust; firmware and boot integrity; workload credentials; and security for server management planes. These controls protect model weights and customer data across cloud providers and bare-metal AI data centers, including partner-operated sites. The manager will set the team's charter, practices, priorities, and integrity roadmap as Anthropic brings up compute across new hardware platforms and partners. The role partners with infrastructure, data center, and hardware teams, as well as vendors, to make integrity controls part of system design. A key objective is to ensure that machines receive secrets and workloads only after proving that they meet security requirements, while enabling new sites to meet the same standard without slowing compute. The role spans threat modeling from silicon and firmware through operating systems and workloads; remote attestation, measured and verified boot, hardware roots of trust, machine identity, and known-good reference values; provenance and verification for deployed artifacts and model weights; protection of sensitive data; and security of server management planes. The manager will make controls repeatable across sites and platforms, preserve security properties as operational ownership shifts to partner teams, and own evidence supporting security goals and compliance. The manager will hire, develop, and retain senior security software engineers, support their career growth, and establish the team's operating practices as it scales. The position is hybrid: Anthropic currently expects staff to work from an office at least 25% of the time, though some roles may require more. Minimum education is a bachelor's degree or an equivalent combination of education, training, and/or experience, in a field relevant to the role as demonstrated through coursework, training, or professional experience. The stated annual salary is $405,000. Anthropic sponsors visas, though sponsorship cannot be guaranteed for every role or candidate.

Requirements

At least 5 years managing engineering teams and 8 years of hands-on experience in platform, infrastructure, or security engineering.
Experience managing infrastructure or security engineering teams, including hiring, developing, and managing senior and staff engineers.
Experience with performance management and growing engineers into staff or lead roles.
Experience maintaining a high-performing team in hypergrowth environments and delivering through reorganizations, charter changes, or leadership turnover.
Experience owning a security or infrastructure domain end to end, including setting multi-year strategy and delivering cross-organizational work with limited direction.
Hands-on engineering experience in at least one of platform security, secure boot and firmware, hardware roots of trust, confidential computing, or software supply chain integrity.
Experience with threat modeling and risk assessment for systems spanning hardware and software, with strong security judgment and pragmatism.
Ability to lead through ambiguity across partner teams and external vendors, including when hardware or schedules are outside one's control.
Appreciation for distributed systems and properties beyond security, including reliability, efficiency, and maintainability.
Experience scaling a team and its systems through hypergrowth.
Clear and persuasive written and verbal communication.
Low ego and high empathy; experience building diverse teams and references from former reports.
Bachelor's degree or an equivalent combination of education, training, and/or experience; relevant field demonstrated through coursework, training, or professional experience.

Nice To Haves

Built or operated remote attestation, device identity, or fleet-wide boot integrity at production scale.
Experience with BMCs, Redfish, GPU or accelerator attestation, or large-scale bare-metal provisioning.
Experience with Nitro, SEV-SNP, TDX, or similar confidential computing platforms.
Built signing, provenance, or transparency systems such as Sigstore, SLSA, or binary transparency.
Designed key management or offline ceremonies for high-value secrets.
Worked in high-assurance environments where controls had to be evidenced, not just deployed.
Taken infrastructure from zero to one and then matured and hardened it into a system relied on by other teams.
Built or rebuilt a hiring loop and maintained the hiring bar while growing headcount quickly.
Pragmatic, steady approach that balances unblocking research, product, and compute with sound architecture.
Familiarity with AI security and safety concepts.

Responsibilities

Set the team's charter, practices, priorities, and integrity roadmap.
Threat model systems from silicon and firmware through operating systems and workloads; determine what to build and deliver it.
Lead the design and implementation of remote attestation, measured and verified boot, hardware roots of trust, machine identity, and known-good reference values.
Make attestation the default process so machines receive credentials and join clusters only after proving their firmware, system software, and security configuration, without human intervention.
Build provenance systems for deployed artifacts and model weights, including signed artifacts, independent verification, and tamper-evident transparency logs.
Lead protection of sensitive data in use and at rest, including encryption and access-control chokepoints.
Secure the server management plane across sites, including scoped and audited access to baseboard management controllers and management of per-device credentials.
Make security controls repeatable so new sites and hardware platforms can inherit them quickly.
Partner with compute bring-up, data center, hardware, infrastructure, and external vendor teams at design time.
Define clear ownership with partner teams and ensure security properties remain in place and provable when operations transfer to another team.
Own integrity evidence supporting security goals and compliance.
Hire, grow, and retain senior security software engineers; manage their career development and establish team practices.
Manage and develop senior and staff engineers, including performance management and growing engineers into staff or lead roles.
Own a security or infrastructure domain end to end, including multi-year strategy and cross-organizational delivery.