Confidential Computing & Virtualization Senior Engineer

OPENCHIP & SOFTWARE TECHNOLOGIES; Barcelona; Híbrido; EUR 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Competitive compensation package

Barcelona-based role

Descripción de la vacante

Openchip & Software Technologies S.L. in Barcelona seeks a Confidential Computing & Virtualization Senior Engineer to design secure platform technologies across the software stack, enabling trusted execution and secure workload isolation.

You'll design TEEs, remote attestation, and secure provisioning for confidential workloads, and collaborate with firmware, OS teams and hardware architects to drive co-design for next-generation secure platforms.

Formación

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or related field.
• 7+ years of experience in systems software, platform security, virtualization, or related engineering field.
• Strong understanding of computer architecture, CPUs, cache/memory hierarchy, buses, and system interactions.
• Solid understanding of Linux kernel internals and pre-boot/boot process.
• Strong programming skills in C and Rust.
• Experience with Git, CI pipelines, and development tools such as Jira.

Responsabilidades

• Design and develop Confidential Computing and virtualization technologies across the platform software stack, enabling trusted execution and secure workload isolation.
• Design and implement Trusted Execution Environments (TEEs), remote attestation, and secure provisioning mechanisms for confidential workloads.
• Develop and validate secure communication and isolation mechanisms between hosts, virtual machines, and hardware accelerators, enabling trusted offloading of sensitive workloads.
• Collaborate with firmware and operating systems teams to integrate Confidential Computing technologies and TEEs across the platform software stack.
• Partner with hardware architects to define security requirements and drive hardware/software co-design for next-generation secure platforms, virtualization technologies, and trusted accelerator architectures.
• Participate in technical discussions, architecture reviews, and design decisions across multiple engineering teams, and contribute to code reviews and documentation.

Conocimientos

Confidential Computing

Virtualization

Linux kernel

C

Rust

Git

CI pipelines

Jira

Educación

Bachelor's or Master's in CS/CE

Herramientas

Git

CI pipelines

Jira

Descripción del empleo

The Role

At Openchip, we're building the next generation of secure RISC-V processors, designed to power AI and data-intensive workloads with privacy and security at their core.

As a Confidential Computing & Virtualization Senior Engineer, you will play a key role in designing and implementing cutting‑edge security capabilities across the platform software stack. Working at the intersection of hardware and software, you'll help shape trusted execution environments, confidential computing technologies, virtualization, and secure accelerator offloading for next‑generation computing platforms.

This is an opportunity to work alongside world‑class hardware architects, firmware engineers, and Linux experts to define secure platform architectures that will enable the future of confidential AI and trusted computing.

Key Responsibilities

Design and develop secure platform technologies:

• Design and develop Confidential Computing and virtualization technologies across the platform software stack, enabling trusted execution and secure workload isolation.
• Design and implement Trusted Execution Environments (TEEs), remote attestation, and secure provisioning mechanisms for confidential workloads.
• Develop and validate secure communication and isolation mechanisms between hosts, virtual machines, and hardware accelerators, enabling trusted offloading of sensitive workloads.

Hardware And Software Co-design

• Collaborate with firmware and operating systems teams to integrate Confidential Computing technologies and Trusted Execution Environments across the platform software stack.
• Partner with hardware architects to define security requirements and drive hardware/software co-design for next-generation secure platforms, virtualization technologies, and trusted accelerator architectures.

Collaboration & Contribution

• Participate in technical discussions, architecture reviews, and design decisions across multiple engineering teams.
• Collaborate through code reviews, bug triaging, and design documentation to ensure high-quality software delivery.
• Contribute to shared engineering responsibilities, including CI monitoring, documentation, issue resolution, and continuous improvement initiatives.

Required Qualifications & Skills

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related technical field.
• 7+ years of experience in systems software, platform security, virtualization, or a related engineering field.
• Strong understanding of computer architecture, including CPUs, cache and memory hierarchy, buses, and system-level interactions.
• Solid understanding of Linux kernel internals and the pre-boot/boot process.
• Strong programming skills in low-level languages such as C and Rust.
• Experience with Git, CI pipelines, and development tools such as Jira.

Experience In At Least Two Of The Following Areas

• Confidential Computing (RISC-V CoVE, Intel SGX, Intel TDX, AMD SEV, Confidential Containers).
• Virtualization technologies (KVM, QEMU, VFIO, virtio, SR-IOV, IOMMU).
• Trusted Execution Environments (TEE) and hardware-enforced isolation mechanisms (TEE, TEE-IO, memory isolation, DMA protection, CHERI, CFI).
• Remote attestation and trusted device communication protocols (SPDM, TDISP, PCIe IDE, DICE, attestation frameworks).

Preferred

• Experience with assembly programming (any architecture).
• Linux kernel and/or device driver development.
• Hypervisor technologies such as KVM, Xen, or QEMU.
• System boot technologies including UEFI/EDK2, ACPI, U-Boot, and Device Tree.
• Open-source software development and contributions to projects or security initiatives such as OpenSSF.
• Firmware lifecycle management.
• JTAG debugging, including secure key generation and management.
• Experience working with hardware cryptography IPs.

What do we offer?

• Join an innovative team and experience company growth.
• We believe in investing in our employees and providing them with the opportunities they need to grow and develop their careers.
• Enjoy a hybrid work environment with flexible schedule.
• Role based in Barcelona
• We offer a remuneration that values your experience.

We are looking for outstanding people willing to join our mission to change this industry and help to build a better world.

If you feel identified with Openchip, please contact us. We can offer a competitive compensation package in a flexible work schema that will help you to keep a balance between your personal and professional life.

At Openchip & Software Technologies S.L., we believe a diverse and inclusive team is the key to groundbreaking ideas. We foster a work environment where everyone feels valued, respected, and empowered to reach their full potential - regardless of race, gender, ethnicity, sexual orientation, or gender identity.