Principal Security Firmware Architect

WHAT YOU DO AT AMD CHANGES EVERYTHING

We care deeply about transforming lives with AMD technology to enrich our industry, our communities, and the world. Our mission is to build great products that accelerate next-generation computing experiences - the building blocks for the data center, artificial intelligence, PCs, gaming and embedded. Underpinning our mission is the AMD culture. We push the limits of innovation to solve the world's most important challenges. We strive for execution excellence while being direct, humble, collaborative, and inclusive of diverse perspectives.

AMD together we advance_

THE ROLE:

AMD is looking for a Systems Security Architect to join our Product Security Office (PSO) team to develop world-class CPU products in the data center with our next generation EPYC server processors. Your role will be to help ensure AMD's mission around foundational security, workload protection, software reliability, and security assurance in the server environment.

As a member of the PSO, you will be chartered with developing a comprehensive understanding of current and future security threats and developing solutions and mitigations for the next generation data centers, cloud computing, and enhanced virtualization and isolation protection. You will be collaborating with both AMD internal and industry teams for future research that will influence architecture decisions to secure AMD's platforms across HPC, Cloud, and Enterprise market segments.

THE PERSON:

The ideal candidate should be passionate about firmware architecture and product security and possess leadership skills to drive sophisticated issues to resolution. You are able to communicate effectively and work optimally with different teams across AMD.

KEY RESPONSIBILITIES:

• Advance AMD's Data Center products focused on next generation server CPU, virtualization/tenant VM isolation, and confidential computing technologies including AMD's SEV-SNP solution
• Engage in holistic end-to-end system security analysis, design, and architecture, including threat assessments, design of security components, and vulnerability assessment towards securing the next generation server platforms and data centers
• Maintain substantial knowledge of state-of-the-art security principles, theories, attacks and contribute to literature and conferences
• Engage with customers for capturing requirements related to security, developing documentation and training materials

PREFERRED EXPERIENCE:

• The ideal candidate will have demonstrated experience in overall platform security and/or device security microarchitecture and/or CPU, SOC, or hardware security-oriented definition.
• Strong understanding of computer architecture systems and concepts, including server CPU systems, fundaments of the system memory hierarchy and caches, and underlying system hardware and firmware. Knowledge of existing hardware architecture(s) (prefer x86 and/or ARM) including associated security and/or virtualization extensions.
• Strong understanding and experience with CPU confidential computing technologies (e.g., AMD SEV, Intel TDX, ARM CCA) and trusted execution environments (TEEs)
• Familiarity and understanding of confidential computing concepts such as remote attestation and sealing
• Expertise in operating systems and virtualization technologies, especially around Linux kernel and driver level development, hypervisors/virtual machines, and containers. Experience with SaaS, PaaS, IaaS and container systems like Kubernetes a plus.
• Familiarity with typical software/hardware interfaces and driver techniques.
• Proficient in C/C++ development and understanding of assembly level instructions sets (AMD64 or ARM)
• Experience designing and/or implementing secure systems, including concepts such as threat modeling, security architecture, protocol design, network security, and operating system security.
• Familiarity and experience in Data Center interconnect standards and associated underlying technologies and protocols
  • PCI Express
  • Compute Express Link (CXL)
• Eagerness and ability to quickly learn new concepts
• Team player, ability to work in cross-site and matrix environments

BENEFICIAL EXPERIENCE:

• Possess fundamental knowledge of security principles and properties, including confidentiality, integrity, availability, authentication, authorization, and auditing
• Experience dealing with security vulnerabilities including vulnerability assessment, CVSS scoring, mitigations, and external communications
• Knowledge and application of cryptographic algorithms in hardware/firmware environments
• Familiarity with hardware security modules, secure boot processes, and root of trust implementations
• Development experience with micro-kernels and/or real-time OS'es
• Experience with secure firmware update mechanisms and attestation protocols

ACADEMIC CREDENTIALS:

• Bachelor's or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent

LOCATION : Austin, Texas

#LI-PA1

At AMD, your base pay is one part of your total rewards package. Your base pay will depend on where your skills, qualifications, experience, and location fit into the hiring range for the position. You may be eligible for incentives based upon your role such as either an annual bonus or sales incentive. Many AMD employees have the opportunity to own shares of AMD stock, as well as a discount when purchasing AMD stock if voluntarily participating in AMD's Employee Stock Purchase Plan. You'll also be eligible for competitive benefits described in more detail here.

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants' needs under the respective laws throughout all stages of the recruitment and selection process.