AI Systems Security Architect

AMD; San Diego (CA); On-site; USD 200,000 - 320,000; Full time

Job summary

AMD is seeking an AI Systems Security Architect to join the Product Security Office to secure platforms that run the world’s AI workloads. You will define and drive architectures that strengthen platform security across hardware, firmware, and software.

You’ll collaborate across teams to implement security features, focusing on root of trust, secure boot, attestation, and defense-in-depth for data-center systems. San Diego preferred, open to other US AMD locations.

Qualifications

• Experience in platform security architecture for AI/data-center workloads.
• Knowledge of CPU, accelerator, and SoC systems, memory hierarchy, PCIe/CXL security.
• Experience with confidential computing and trusted execution environments.
• Expertise in root of trust, secure boot, measured boot, and boot chain architecture, including attestation (DICE, TPM/TCG).
• Experience with firmware security, including runtime integrity and secure updates.
• Experience with threat modeling and security architecture at platform scope.
• Knowledge of cryptographic algorithms, key hierarchies, and hardware/firmware key management.

Responsibilities

• Define and drive platform-wide security architecture across silicon, firmware, and software for AI/datacenter systems.
• Drive the platform attestation architecture, including root of trust, measured boot, reference measurements, and remote verification.
• Help drive system-wide threat modeling and security analysis across hardware, firmware, and software.
• Contribute to secure debugging architecture and protection of debug, test, and diagnostic interfaces on production systems.
• Write system architecture specifications for platform security features.
• Drive security assessment and audit readiness for AMD platforms, and close findings into the architecture.
• Apply AI-assisted engineering tooling to accelerate security analysis, review, and documentation.

Skills

C/C++ proficiency

Reading assembly

AI-assisted tooling

Threat modeling

Platform security architecture

Security architecture ownership

Communication skills

GPU/accelerator knowledge

Firmware security

Supply-chain security

Education

Bachelor's/Master's in CS/CE/EE

Tools

Caliptra

OpenBMC

coreboot

EDK II

openSIL

Job description

ADVANCE YOUR CAREER. ADVANCE THE WORLD.

At AMD, we believe technology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMD is shaping the future.

ADVANCE YOUR CAREER. ADVANCE THE WORLD.

At AMD, we believe technology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMD is shaping the future.

Whether you’re designing next-gen processors, enabling AI breakthroughs, or bringing leading edge products to market, every role at AMD contributes to something bigger — technology that moves the world forward. Join us and, together, we’ll advance your career.

The Role

AMD is looking for an AI Systems Security Architect to join the Product Security Office (PSO) in securing the platforms that run the world’s most demanding AI workloads. Your role will be to define and drive architectures that enhance platform security. You will work at the intersection of hardware, firmware, and software, designing and implementing security features that protect AI workloads in modern data center environments.

The Person

The ideal candidate is passionate about product security for AI systems, spanning firmware, software, and hardware, and possesses leadership skills to drive sophisticated issues to resolution. You are able to communicate effectively and work optimally with different teams across AMD.

Key Responsibilities

• Define and drive platform-wide security architecture across silicon, firmware, and software for AI and datacenter systems, including the platform's trust boundaries
• Drive the platform attestation architecture, including root of trust, measured boot, reference measurements, and remote verification
• Help drive system-wide threat modeling and security analysis across hardware, firmware, and software
• Contribute to secure debug architecture and the protection of debug, test, and diagnostic interfaces on production systems
• Write system architecture specifications for platform security features
• Drive security assessment and audit readiness for AMD platforms, and close findings into the architecture
• Apply AI-assisted engineering tooling to accelerate security analysis, review, and documentation, and help establish how the team uses it

Preferred Experience

• Multiple years' experience in platform, system, or product security architecture, with demonstrated ownership of security architecture at system scope
• Deep understanding of computer architecture and platform composition, including CPU, accelerator, and SoC systems, memory hierarchy, DMA, and I/O subsystems, as well as datacenter interconnect standards (PCIe, CXL) and their security features
• Experience with confidential computing and trusted execution environments, including memory encryption and VM isolation
• Expertise in root of trust, secure boot, measured boot, and boot chain architecture, including transitions between boot stages, and in attestation, including DICE, SPDM, TPM/TCG concepts, and the reference measurement lifecycle
• Experience with firmware security, including runtime integrity, anti-rollback, secure update, and recovery design
• Expertise in threat modeling, security architecture, and protocol design at platform scope
• Knowledge and application of cryptographic algorithms, key hierarchies, and key management in hardware and firmware environments
• Proficient in C/C++ and comfortable reading assembly, with demonstrated fluency in AI-assisted and agentic development tooling in real engineering work
• Effective communication and problem-solving skills, and the ability to influence across organizations
• Experience securing AI/ML workloads and understanding of their security requirements at datacenter scale, with familiarity with GPU and accelerator architecture, virtualization (SR-IOV, SIOV, MIG), and firmware
• Experience with secure debug, JTAG and scan chain protection, fuse and lifecycle state management, and familiarity with side-channel and fault-injection analysis
• Familiarity with supply-chain integrity practices (SBOM, build provenance) and open-source firmware projects (Caliptra, OpenBMC, coreboot, EDK II, openSIL); experience supporting external security audits, red teams, or independent platform assessment; knowledge of hardware security standards and frameworks (TCG, NIST, OCP); and awareness of post-quantum cryptography migration for firmware signing and device identity

Academic Credentials

• Bachelor's or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent

LOCATION:

• San Diego, CA preferred. Open to other AMD US locations for the right candidate.

This role is not eligible for visa sponsorship.

Benefits offered are described: AMD benefits at a glance.

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.

AMD may use Artificial Intelligence to help screen, assess or select applicants for this position. AMD’s “Responsible AI Policy” is available here.

This posting is for an existing vacancy.