Confidential Computing & Virtualization Senior Engineer

Tamarind Intelligence; Barcelona; Presencial; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work environment

Career growth opportunities

Competitive compensation

Descripción de la vacante

Openchip is building secure RISC-V processors and confidential computing technologies in Barcelona. A Senior Engineer will design and implement security across platform software, focusing on trusted execution environments, virtualization, and secure offloading for confidential AI workloads.

You will collaborate with hardware architects, firmware, and Linux experts to shape secure platform architectures and drive hardware/software co-design for next-generation secure platforms.

Formación

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related field.
• 7+ years in systems software, platform security, virtualization, or related engineering.
• Strong knowledge of CPU architectures, memory hierarchies, buses and system interactions.
• Solid Linux kernel internals and pre-boot/boot process understanding.
• Proficiency in C and Rust; experience with Linux development tools.

Responsabilidades

• Design and develop Confidential Computing and virtualization across the platform software stack.
• Implement TEEs, remote attestation, and secure provisioning for confidential workloads.
• Develop secure communication and isolation between hosts, VMs, and accelerators.
• Collaborate with firmware and OS teams for security integration and co-design.
• Participate in architecture reviews, code reviews, and documentation.

Conocimientos

Low-level programming

C

Rust

Linux kernel

Virtualization

Confidential Computing

TEEs

Hardware/Software co-design

Secure platform architectures

Remote attestation

Security architectures

CI pipelines

Git

Jira

Educación

Bachelor's or Master's degree in Computer Science/Engineering

Herramientas

Jira

Git

CI pipelines

Descripción del empleo

The Role:

At Openchip, we're building the next generation of secure RISC-V processors, designed to power AI and data-intensive workloads with privacy and security at their core.

As a Confidential Computing & Virtualization Senior Engineer, you will play a key role in designing and implementing cutting-edge security capabilities across the platform software stack. Working at the intersection of hardware and software, you'll help shape trusted execution environments, confidential computing technologies, virtualization, and secure accelerator offloading for next-generation computing platforms.

This is an opportunity to work alongside world-class hardware architects, firmware engineers, and Linux experts to define secure platform architectures that will enable the future of confidential AI and trusted computing.

Key Responsibilities:

Design and develop secure platform technologies:

• Design and develop Confidential Computing and virtualization technologies across the platform software stack, enabling trusted execution and secure workload isolation.
• Design and implement Trusted Execution Environments (TEEs), remote attestation, and secure provisioning mechanisms for confidential workloads.
• Develop and validate secure communication and isolation mechanisms between hosts, virtual machines, and hardware accelerators, enabling trusted offloading of sensitive workloads.

Hardware and software co-design:

• Collaborate with firmware and operating systems teams to integrate Confidential Computing technologies and Trusted Execution Environments across the platform software stack.
• Partner with hardware architects to define security requirements and drive hardware/software co-design for next-generation secure platforms, virtualization technologies, and trusted accelerator architectures.

Collaboration & contribution:

• Participate in technical discussions, architecture reviews, and design decisions across multiple engineering teams.
• Collaborate through code reviews, bug triaging, and design documentation to ensure high-quality software delivery.
• Contribute to shared engineering responsibilities, including CI monitoring, documentation, issue resolution, and continuous improvement initiatives.

Required qualifications & Skills:

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related technical field.
• 7 years of experience in systems software, platform security, virtualization, or a related engineering field.
• Strong understanding of computer architecture, including CPUs, cache and memory hierarchy, buses, and system-level interactions.
• Solid understanding of Linux kernel internals and the pre-boot/boot process.
• Strong programming skills in low-level languages such as C and Rust.
• Experience with Git, CI pipelines, and development tools such as Jira.

Experience in at least two of the following areas:

• Confidential Computing (RISC-V CoVE, Intel SGX, Intel TDX, AMD SEV, Confidential Containers).
• Virtualization technologies (KVM, QEMU, VFIO, virtio, SR-IOV, IOMMU).
• Trusted Execution Environments (TEE) and hardware-enforced isolation mechanisms (TEE, TEE-IO, memory isolation, DMA protection, CHERI, CFI).
• Remote attestation and trusted device communication protocols (SPDM, TDISP, PCIe IDE, DICE, attestation frameworks).

Preferred

• Experience with assembly programming (any architecture).
• Linux kernel and/or device driver development.
• Hypervisor technologies such as KVM, Xen, or QEMU.
• System boot technologies including UEFI/EDK2, ACPI, U-Boot, and Device Tree.
• Open-source software development and contributions to projects or security initiatives such as OpenSSF.
• Firmware lifecycle management.
• JTAG debugging, including secure key generation and management.
• Experience working with hardware cryptography IPs.

What do we offer?

• Join an innovative team and experience company growth.
• We believe in investing in our employees and providing them with the opportunities they need to grow and develop their careers.
• Enjoy a hybrid work environment with flexible schedule.
• Role based in Barcelona
• We offer a remuneration that values your experience.

We are looking for outstandingpeople willing to join our mission to change this industry and help to build a better world.

At Openchip & Software Technologies S.L., we believe a diverse and inclusive team is the key to groundbreaking ideas. We foster a work environment where everyone feels valued, respected, and empowered to reach their full potential -- regardless of race, gender, ethnicity, sexual orientation, or gender identity.