Working Student (f/m/d) - Confidential Computing for Edge Systems

Siemens AG; Garching an der Alz; On-site; EUR 16,000 - 28,000; Part time

Job summary

Siemens AG in Bayern sucht Studierende im Bereich Informatik/Kybersecurity für Arbeiten an vertraulichen Workloads auf Edge- und Embedded-Plattformen. Sie entwickeln Proofs of Concept, arbeiten mit hardwaregestützten vertraulichen VMs (TDX, SEV-SNP) sowie Kata Containers und Confidential Containers.

Zusätzlich evaluieren sie Speicherkonzepte, Remote Attestation und sichere Schlüsselweitergabe. Sie bauen Tools zum Erstellen, Verpacken und Bereitstellen vertraulicher Anwendungen und prüfen

Qualifications

• Du bist aktuell in einem Informatik-/Kybersecurity- oder Embedded-Engineering-Studium eingeschrieben.
• Du verfügst über praktische Linux-Kenntnisse und arbeitest nah an Systemsoftware.
• Programmierung in C/C++, Rust oder Go ist dir vertraut.
• Erfahrung mit Virtualisierung, Docker, KVM/QEMU, Netzwerken oder Low-Level-Debugging ist vorteilhaft.
• Kenntnisse zu Intel TDX, AMD SEV-SNP, TEEs, TPMs oder Remote Attestation sind plus.
• Python ist für Automatisierung und Evaluation von Vorteil.

Responsibilities

• Entwerfen und Bewerten von Proofs of Concept für vertrauliche Workloads.
• Arbeiten mit hardwaregestützten vertraulichen VMs (TDX, SEV-SNP).
• Arbeiten mit Kata Containers, Confidential Containers, KVM/QEMU.
• Entwickeln von Tools zum Bauen, Verpacken und Bereitstellen vertraulicher Anwendungen.
• Untersuchen, wie bestehende Anwendungen in vertrauliche Umgebungen migriert werden können.
• Untersuchen von Protokollen für Speichersicherung, Attestation und Schlüsselbereitstellung.
• Benchmarking von Leistung, Latenz und Overhead vertraulicher Workloads.
• Unterstützung von Echtzeitszenarien in vertraulichen VMs.

Skills

Linux-Erfahrung

C/C++

Rust

Go

Virtualisierung

Docker

KVM/QEMU

Networking

Low-level Debugging

Python-Skripte

Intel TDX

AMD SEV-SNP

Education

Studierende/r der Informatik / Kybersicherheit / Embedded Systems

Tools

Kata Containers

Confidential Containers

Docker

Job description

Aufgaben:

Developing and evaluating Proofs of Concept for confidential workloads on edge and embedded platformsWorking with hardware-backed confidential virtual machines based on technologies such as Intel Trust Domain Extensions (TDX) and AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP)Working with Kata Containers, Confidential Containers, KVM/QEMU and related virtualization and container technologiesImplementing and evaluating workflows for image encryption, remote attestation and secure key releaseDeveloping tooling for building, packaging and deploying confidential applicationsInvestigating how existing applications can be migrated into confidential environments with minimal changesExploring mechanisms for persistent storage, sealing, backup and recoveryInvestigating attestation and key provisioning for intermittently connected or offline devicesBenchmarking performance, latency and resource overhead of confidential workloadsSupporting real-time experiments for latency-critical applications inside confidential virtual machinesBuilding demonstrators for use cases such as application IP protection, confidential industrial AI or sensitive production dataEvaluating and extending relevant open-source technologies where required

Qualifikation:

Education : You are currently studying Computer Science, Cybersecurity, Electrical Engineering, Embedded Systems or a related fieldExperience and Skills :You have practical experience with Linux and enjoy working close to operating systems and system softwareYou have programming experience in C/C++, Rust, Go or a comparable systems programming languageExperience with virtualization, Docker, KVM/QEMU, networking or low-level debugging is beneficialKnowledge of Intel TDX, AMD SEV-SNP, Trusted Execution Environments, TPMs or remote attestation is a plusExperience with Kata Containers or Confidential Containers is a plusPython is beneficial for automation, testing and evaluationYou enjoy building and debugging system prototypes and validating concepts on real hardwareWays of Working : You work independently and enjoy collaborating in an interdisciplinary research environmentLanguages : No specific language requirements mentioned

Über Uns:

At Siemens, we believe that feeling valued and included is the foundation for doing great work. That's why we aim to create an inclusive workplace where everyone feels a sense of belonging, and where individual perspectives and experiences are celebrated. Our commitment to fairness and respect extends to every applicant.The world never stands still. And new challenges arise every day. With a passion for questioning things, for supplying ideas, and intelligently driving things forward we are helping society move towards a smarter tomorrow. Be it with technologies that reduce carbon emissions in cities or hyperintelligent robots. This is how we are able, to tackle the most important projects and push them forward together. Help us shape the future.