Staff Engineer (CC)

Opaque Systems•San Francisco, CA

About The Position

As a Staff Engineer at Opaque Systems, you will play a critical role in shaping the architecture and driving the technical direction of the core OPAQUE platform, with a focus on the confidential computing infrastructure. You’ll collaborate closely with cross-functional teams to design, develop, and scale solutions for confidential AI. This is an opportunity to solve complex technical challenges while making a significant impact on the development of next-generation technologies.

Requirements

10+ years of software engineering experience, with a focus on distributed systems, cloud computing, or security.
Deep hands-on experience in confidential computing / TEE technologies (e.g., CNCF CoCo)
Fluency in attestation protocols: attestation quote generation and verification, RATS (RFC 9334), EAT/EAR standards
Systems programming at production scale in Go and/or Rust; kernel modules, ioctl interfaces, or TEE SDK integration code a strong plus
Cloud-native platform depth — Kubernetes operators, custom admission controllers, runtime classes, and TEE workload orchestration across multiple clouds
Cryptographic engineering fundamentals: key hierarchies, AEAD schemes, digital signatures, and the ability to reason about threat models at the hardware boundary
Expertise in system architecture and design, with a strong understanding of scalability, fault tolerance, and performance optimization.
Proven track record of delivering large-scale, high-performance, and secure software systems.
Strong communication skills, with the ability to collaborate effectively across technical and non-technical teams.

Nice To Haves

Track record of open-source contribution or standards engagement: CNCF CoCo, Project Oak, IETF RATS, or equivalent

Responsibilities

Lead the design, architecture, and implementation of core software components for Opaque’s confidential computing platform
Design, implement, and maintain end-to-end attestation services and infrastructure
Lead integration of TEE technologies (CNCF CoCo, hyperscaler CC offerings) with OPAQUE's platform
Design and operate multi-cloud CC deployments at the Kubernetes platform layer — runtime classes, TEE node pools, custom admission controllers, and service mesh security for confidential workloads
Define and enforce cryptographic standards: key derivation, signing schemes, secure channel establishment, and secrets management within TEE boundaries
Drive code quality and security review standards across the security engineering team — review at the correctness and side-channel level, not just design
Collaborate with product, engineering, and AI teams to deliver scalable, high-performance, and secure solutions.
Drive technical excellence across the engineering team, setting best practices for coding, architecture, testing, and deployment.
Mentor and guide junior engineers, fostering a culture of continuous improvement and technical innovation.
Work closely with stakeholders to define technical requirements and ensure alignment with business objectives.
Optimize system performance, scalability, and fault tolerance while ensuring the security and privacy of data in all phases of computation.
Stay ahead of industry trends and advancements in confidential AI and confidential computing
Act as a key decision-maker in technical strategies, contributing to both tactical and strategic goals.