Job Description

We are looking for a Platform Security Architect to help shape the security architecture of next-generation data center platforms. This role focuses on how security is integrated into systems above the silicon, spanning firmware, boot chains, management planes, and platform lifecycle controls.

You will collaborate closely with hardware and firmware teams to help ensure the platform has a coherent and resilient security architecture from board to rack scale. The role requires strong experience in firmware security architecture, applied cryptography, and system-level threat modelling.

Responsibilities

• Platform Security Architecture: Design the security architecture for board and rack platforms, including: Extension of root of trust beyond the SoC, Secure and measured boot chains, Firmware signing and verification architecture, Device identity and provisioning models, Debug and lifecycle security mechanisms.
• Platform Threat Modeling: Create and maintain the end-to-end platform threat model covering: Firmware and boot chains, Management plane components (BMC, controllers) Rack-level attack paths.
• Cryptographic Foundations: Design and help evolve the cryptographic foundations of the platform, including: Firmware signing hierarchy, Key ownership and trust anchors, Certificate and device identity models, Key rotation and revocation strategies.
• Firmware Security Requirements: Work closely with firmware teams to define and assess security mechanisms for BIOS, BMC, and device firmware.

Required Skills and Experience

• Experience designing firmware or platform security architectures
• Deep understanding of secure boot chains and firmware trust models
• Experience designing firmware signing systems and key hierarchies