Remote job
Hardware Security Architect, Principal
Job details
About this role
Role overview Lead the hardware security architecture for AI accelerator silicon, protecting models, data, firmware, and intellectual property from design through production. The work spans trusted startup, secure device operation, protection of AI workloads, and security reviews across the platform.
Responsibilities - Define silicon security architecture, including hardware roots of trust, secure and measured boot, authenticated firmware, and device identity. - Design controls for secure debug and manufacturing, key provisioning, fuse programming, anti-rollback, JTAG, scan access, and device lifecycle states. - Protect AI models and weights, memory, and transfers across PCIe, CXL, and on-chip interconnects using encryption, authentication, and access controls. - Model threats and review designs for physical attacks, fault injection, side channels, replay, firmware compromise, and supply-chain risks. - Work with firmware, software, architecture, test, validation, manufacturing, and cloud security teams to carry protections from design into deployment. - Track relevant security standards and apply AI-assisted methods to threat modeling, verification, coverage analysis, and documentation.
Requirements - At least 12 years of hardware security architecture experience. - Deep expertise in secure boot and hardware root-of-trust design. - Strong cryptography and key-management skills. - Practical experience with secure manufacturing processes. - Understanding of silicon bring-up in security-critical systems.
Benefits and work setup - Remote-first work with a provided computer and home office setup. - Company-paid medical, dental, vision, life, and disability coverage, with additional coverage options. - Unlimited paid time off and 13 paid holidays. - Competitive salary, equity, and a 401(k) with company matching from the first day of eligibility. - Open to U.S.-authorized candidates; new visa sponsorship is unavailable, though eligible H-1B transfers may be supported.