Security Architect Jobs

About The Position

Requirements

• Bachelor’s degree in Electrical Engineering, Computer Engineering, Computer Science, or equivalent practical experience.
• Extensive experience in PC, embedded, firmware, hardware, or platform system architecture, preferably in commercial client systems or security-sensitive devices.
• Demonstrated ability to architect solutions spanning hardware, firmware, software, cloud services, manufacturing, and customer deployment environments.
• Deep technical understanding of BIOS/UEFI, embedded controllers, secure boot, firmware update and recovery flows, cryptographic signing, PKI-based device identity, attestation, and secure configuration management.
• Experience defining product requirements, writing technical specifications, driving proof-of-concepts, and influencing roadmap decisions across multiple engineering teams.
• Ability to communicate complex technical ideas clearly to executive, engineering, customer, sales, and field audiences.
• Proven ability to lead through influence in a matrixed organization and resolve ambiguity across competing business, technical, and customer priorities.

Nice To Haves

• Experience with hardware-based roots of trust, platform certificates, DICE/SPDM concepts, supply-chain assurance, quantum-safe cryptography, secure-element or embedded security-controller identity, and compliance or certification frameworks.
• Experience with enterprise endpoint manageability platforms such as Intune, SCCM, device-management consoles, or cloud-based key management services.
• Hands-on capability with scripting or development tools such as PowerShell, C#, Python, Java, GitHub, Visual Studio Code, or similar environments.
• Experience with customer-facing technical briefings, sales enablement, competitive analysis, standards participation, patent development, or external security ecosystem collaboration.
• Familiarity with commercial PC platform architecture, silicon vendor security technologies, Windows platform security, docking, peripheral security, battery authentication, telemetry, and right-to-repair considerations.

Responsibilities

• Serve as principal architect for the HP Endpoint Security Controller roadmap and related hardware- and firmware-based capabilities, including cryptographic identity, attestation, secure communication, event logging, and future controller generations.
• Define and evolve HP Sure Start architecture and firmware resilience capabilities, including hardware-enforced firmware authenticity, recovery, updates, and protection mechanisms.
• Drive secure BIOS and firmware configuration management strategies, including HP Sure Admin capabilities, key management, zero-touch provisioning, customer deployment models, and integration with enterprise management tools.
• Lead cross-functional architecture definition across hardware, BIOS, embedded controller firmware, diagnostics, cloud services, client software, manageability tools, product management, and customer-facing teams.
• Anticipate emerging threats and technology shifts, including quantum-safe cryptography, platform attestation, supply-chain security, physical tamper resistance, peripheral authentication, and new non-volatile memory architectures.
• Partner with silicon vendors, operating-system providers, standards organizations, security research teams, and product teams to influence and align platform security direction.
• Support customer briefings, field escalations, competitive positioning, technical marketing, training events, and executive communications about HP commercial PC platform security.
• Create specifications, proof-of-concepts, validation tools, scripts, demonstrations, and reference implementations to accelerate adoption of new security capabilities.
• Mentor engineers and technical leaders through architectural guidance, design reviews, talent development, and support for practical tradeoffs among security, cost, schedule, customer experience, and portfolio impact.
• Set technical direction, create architectural clarity, and help prioritize high-value security investments.
• Develop practical product plans and production-ready capabilities from exploratory concepts.
• Represent HP platform security in customer, partner, industry, and internal executive discussions.
• Build architectural knowledge and technical capability through mentoring, documentation, design reviews, and knowledge transfer.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Long-term and short-term disability insurance
• Employee assistance program
• Flexible spending account
• Life insurance
• 4–12 weeks of fully paid parental leave based on tenure
• 11 paid holidays
• Additional flexible paid vacation and sick leave
• Bonus and/or equity opportunities