AI Systems Security Architect

Socket.dev; San Diego (CA); Hybrid; USD 180,000 - 250,000; Full time

Job summary

AMD is seeking an AI Systems Security Architect to join the Product Security Office in San Diego. You will design and implement security features across silicon, firmware, and software for AI and datacenter platforms, shaping root of trust, secure boot, and attestation strategies.

Collaboration across hardware, firmware, and software teams is essential to drive secure architectures and audits. You will lead threat modeling, define platform-wide security requirements, and help integrate

Qualifications

• Multiple years' experience in platform, system, or product security architecture with ownership of security architecture at system scope.
• Deep understanding of computer architecture and platform composition, including CPU, accelerator, and SoC systems, memory hierarchy, DMA, and I/O subsystems, as well as datacenter interconnect standards (PCIe, CXL) and their security features.
• Experience with confidential computing and trusted execution environments, including memory encryption and VM isolation.
• Expertise in root of trust, secure boot, measured boot, and boot chain architecture, including transitions between boot stages, and in attestation, including DICE, SPDM, TPM/TCG concepts, and the reference measurement lifecycle.
• Experience with firmware security, including runtime integrity, anti-rollback, secure update, and recovery design.
• Expertise in threat modeling, security architecture, and protocol design at platform scope.
• Knowledge and application of cryptographic algorithms, key hierarchies, and key management in hardware and firmware environments.
• Proficient in C/C++ and comfortable reading assembly, with demonstrated fluency in AI-assisted and agentic development tooling in real engineering work.
• Effective communication and problem-solving skills, and the ability to influence across organizations.
• Experience securing AI/ML workloads and understanding of their security requirements at datacenter scale, with familiarity with GPU and accelerator architecture, virtualization (SR-IOV, SIOV, MIG), and firmware.
• Experience with secure debug, JTAG and scan chain protection, fuse and lifecycle state management, and familiarity with side-channel and fault-injection analysis.
• Familiarity with supply-chain integrity practices (SBOM, build provenance) and open-source firmware projects (Caliptra, OpenBMC, coreboot, EDK II, openSIL); experience supporting external security audits, red teams, or independent platform assessment; knowledge of hardware security standards and frameworks (TCG, NIST, OCP); and awareness of post-quantum cryptography migration for firmware signing and device identity

Responsibilities

• Define and drive platform-wide security architecture across silicon, firmware, and software for AI and datacenter systems, including the platform's trust boundaries.
• Drive the platform attestation architecture, including root of trust, measured boot, reference measurements, and remote verification.
• Help drive system-wide threat modeling and security analysis across hardware, firmware, and software.
• Contribute to secure debug architecture and the protection of debug, test, and diagnostic interfaces on production systems.
• Write system architecture specifications for platform security features.
• Drive security assessment and audit readiness for AMD platforms, and close findings into the architecture.
• Apply AI-assisted engineering tooling to accelerate security analysis, review, and documentation, and help establish how the team uses it.

Skills

Platform security

Security architecture

C/C++

Reading assembly

Threat modeling

Education

Bachelor's or Master's in CS/CE/EE

Tools

OpenBMC

Caliptra

Job description

ADVANCE YOUR CAREER. ADVANCE THE WORLD.

At AMD, we believetechnology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMDis shapingthefuture.

Whetheryou’redesigning next-gen processors, enabling AI breakthroughs, orbringing leading edge products to market, every role at AMD contributes to something bigger— technologythat moves the world forward.Join us and, together, we’ll advance your career.

THE ROLE:

AMD is looking for an AI Systems Security Architect to join the Product Security Office (PSO) in securing the platforms that run the world's most demanding AI workloads. Your role will be to define and drive architectures that enhance platform security. You will work at the intersection of hardware, firmware, and software, designing and implementing security features that protect AI workloads in modern data center environments.

THE PERSON:

The ideal candidate is passionate about product security for AI systems, spanning firmware, software, and hardware, and possesses leadership skills to drive sophisticated issues to resolution. You are able to communicate effectively and work optimally with different teams across AMD.

KEY RESPONSIBILITIES:

• Define and drive platform-wide security architecture across silicon, firmware, and software for AI and datacenter systems, including the platform's trust boundaries
• Drive the platform attestation architecture, including root of trust, measured boot, reference measurements, and remote verification
• Help drive system-wide threat modeling and security analysis across hardware, firmware, and software
• Contribute to secure debug architecture and the protection of debug, test, and diagnostic interfaces on production systems
• Write system architecture specifications for platform security features
• Drive security assessment and audit readiness for AMD platforms, and close findings into the architecture
• Apply AI-assisted engineering tooling to accelerate security analysis, review, and documentation, and help establish how the team uses it

PREFERRED EXPERIENCE:

• Multiple years' experience in platform, system, or product security architecture, with demonstrated ownership of security architecture at system scope
• Deep understanding of computer architecture and platform composition, including CPU, accelerator, and SoC systems, memory hierarchy, DMA, and I/O subsystems, as well as datacenter interconnect standards (PCIe, CXL) and their security features
• Experience with confidential computing and trusted execution environments, including memory encryption and VM isolation
• Expertise in root of trust, secure boot, measured boot, and boot chain architecture, including transitions between boot stages, and in attestation, including DICE, SPDM, TPM/TCG concepts, and the reference measurement lifecycle
• Experience with firmware security, including runtime integrity, anti-rollback, secure update, and recovery design
• Expertise in threat modeling, security architecture, and protocol design at platform scope
• Knowledge and application of cryptographic algorithms, key hierarchies, and key management in hardware and firmware environments
• Proficient in C/C++ and comfortable reading assembly, with demonstrated fluency in AI-assisted and agentic development tooling in real engineering work
• Effective communication and problem-solving skills, and the ability to influence across organizations
• Experience securing AI/ML workloads and understanding of their security requirements at datacenter scale, with familiarity with GPU and accelerator architecture, virtualization (SR-IOV, SIOV, MIG), and firmware
• Experience with secure debug, JTAG and scan chain protection, fuse and lifecycle state management, and familiarity with side-channel and fault-injection analysis
• Familiarity with supply-chain integrity practices (SBOM, build provenance) and open-source firmware projects (Caliptra, OpenBMC, coreboot, EDK II, openSIL); experience supporting external security audits, red teams, or independent platform assessment; knowledge of hardware security standards and frameworks (TCG, NIST, OCP); and awareness of post-quantum cryptography migration for firmware signing and device identity

ACADEMIC CREDENTIALS:

• Bachelor's or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent

LOCATION:

• San Diego, CA preferred. Open to other AMD US locations for the right candidate.

This role is not eligible for visa sponsorship.

#LI-TB1

#LI-Hybrid

Benefits offered are described: AMD benefits at a glance.

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.

AMD may use Artificial Intelligence to help screen, assess or select applicants for this position. AMD’s “Responsible AI Policy” is available here.

This posting is for an existing vacancy.