Sr. Staff Platform Security Engineer, Confidential Computing

Groq•Worth, IL

26d•$341,400 - $401,600

About The Position

Groq is hiring a Sr. Staff Platform Security Engineer to build hardware-rooted security foundations that protect sensitive AI workloads across hardware and software boundaries. The role sets technical direction and builds security capabilities spanning firmware security, hardware trust, attestation, trusted execution environments, and protected workload execution. As a senior technical leader, the engineer will work close to the hardware layer and partner across hardware, firmware, systems, platform, and security engineering to address security challenges at the foundation of the computing stack. The role is based in the Dallas, San Francisco, or New York City area. The person hired must be based in one of these three areas. Remote work is available while Groq establishes its local office, with an expectation that the role will transition to onsite once the office opens. The position leads security-sensitive designs and cross-functional technical initiatives, develops systems software and security automation, and communicates trust models, architecture, tradeoffs, and risks to engineering teams and leadership. The work supports customer trust, platform reliability, and compliance requirements. Groq describes its culture as purposeful, builder-oriented, mission-driven, focused on difficult problems, and committed to high performance. The U.S. total cash salary range is $341,400–$401,600, inclusive of potential bonus value; placement depends on location, experience, skills, and internal compensation standards. International compensation varies by local market. Groq also offers a Long-Term Incentive (LTI) Program and employee benefits.

Requirements

At least 6 years of systems, firmware, hardware, or security engineering experience, with deep expertise in low-level systems security and experience in hardware-rooted trust, attestation, trusted execution environments, confidential computing, or related technologies.
Demonstrated experience setting technical direction and owning complex security architecture spanning multiple layers of the hardware and software stack.
Deep expertise in firmware security, hardware-rooted trust, attestation, trusted execution environments (TEEs), protected workload execution, or closely related low-level security domains.
Deep understanding of hardware-rooted trust, including roots of trust, platform integrity, secure or measured boot, device identity, and hardware-backed attestation.
Experience designing or implementing attestation systems and reasoning about trust across hardware, firmware, host, and workload boundaries.
Strong understanding of firmware and low-level systems security, including boot chains, platform integrity, and security boundaries between hardware and software.
Strong understanding of cryptographic systems, key management, certificate lifecycle, secure credential management, and secure provisioning in trusted computing environments.
Strong systems engineering skills and experience developing low-level systems software, security tooling, firmware, or production automation in C, C++, Rust, Go, Python, or similar languages.
Ability to threat model complex systems and reason about attacks spanning hardware, firmware, operating systems, infrastructure, and application workloads.
Experience leading ambiguous, cross-functional technical initiatives and influencing engineering direction across specialized engineering disciplines.
Ability to clearly communicate complex trust models, security architecture, and technical risk to different audiences.

Nice To Haves

Experience developing or securing firmware, platform initialization, device security, or hardware-backed security mechanisms.
Experience integrating hardware-rooted trust, attestation, or confidential computing capabilities with higher-level infrastructure, identity, key-management, or workload systems.
Experience with bare-metal lifecycle security or securing large-scale compute environments.

Responsibilities

Set technical direction and own architecture for security capabilities spanning hardware, firmware, systems software, and protected workload execution.
Design and build security architectures for hardware-rooted trust, attestation, trusted execution environments, and hardware-backed isolation.
Architect attestation capabilities that establish and verify trust across hardware, firmware, host, and workload boundaries.
Partner with hardware, firmware, and systems engineers on platform integrity, secure and measured boot, device identity, and other hardware-rooted security capabilities.
Design security capabilities for protected workload execution and maintain trust throughout the workload lifecycle.
Design secure approaches for cryptographic key material, credentials, identity, certificates, and provisioning in trusted computing environments.
Shape trusted compute infrastructure security throughout its lifecycle, from provisioning and platform initialization through operation and decommissioning.
Lead threat modeling and security analysis across hardware, firmware, host software, and workload execution; identify systemic risks and drive durable mitigations.
Develop systems software, security tooling, and automation to make hardware-backed security capabilities reliable and operable at scale.
Lead security-sensitive designs across organizational boundaries and translate complex hardware and systems risks into practical engineering decisions.
Establish technical patterns and influence security direction across hardware, firmware, systems, platform, and security engineering.
Partner across engineering and security to build capabilities that strengthen customer trust and platform reliability and support compliance requirements.
Communicate trust models, security architecture, technical tradeoffs, and risk to engineers, technical leaders, and security leadership.