Distinguished Technologist - Principal Architect, Platform Security and Firmware Systems

HP; Spring (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

HP seeks a Distinguished Technologist to serve as Principal Architect for Platform Security and Firmware Systems on the commercial PC platform. You will envision, define, and drive architecture across hardware, firmware, software, and cloud-integrated security to protect HP PCs from threats.

This role requires deep embedded systems, firmware, hardware security, and platform architecture expertise, with the ability to translate complex capabilities into customer value and influence stakeholders

Qualifications

• Bachelor's degree or equivalent practical experience in Electrical/Computer Engineering or CS.
• Extensive experience in PC hardware, firmware, embedded systems, and platform architecture.
• Deep knowledge of BIOS/UEFI, secure boot, attestation, cryptographic signing, PKI-based identity.
• Experience defining product requirements, writing specs, driving proofs of concept, and influencing roadmaps across teams.
• Ability to communicate complex technical ideas to executives, engineers, customers, and field staff.

Responsibilities

• Lead as principal architect for HP Endpoint Security Controller roadmap and secure hardware/firmware capabilities.
• Define and evolve Secure BIOS/firmware configuration and HP Sure Admin ecosystem.
• Drive architecture across hardware, BIOS, embedded firmware, cloud services, and manageability tooling.
• Collaborate with silicon vendors, OS providers, standards bodies, and security teams to align platform security directions.
• Translate technical capabilities into customer value propositions and business impact.
• Mentor engineers and leaders, guiding tradeoffs among security, cost, schedule and user experience.
• Support customer briefings, field escalations, and competitive positioning with technical depth.
• Create reference implementations, proofs-of-concepts, and validation tools to accelerate adoption of security capabilities.

Skills

Embedded systems

Platform firmware

Security architecture

Cryptography

Attestation

Secure boot

PKI identity

Leadership

Cross-functional

Communication

Education

Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science

Tools

PowerShell

Python

C#

GitHub

Visual Studio Code

Job description

Distinguished Technologist - Principal Architect, Platform Security and Firmware Systems

Description

HP is seeking a senior technical leader to serve as a lead architect for hardware rooted Platform Root of Trust for HP's commercial PC platform. In this role, you will be responsible for envisioning, defining, and driving the architecture of hardware, firmware, software, and cloud-integrated security capabilities that protect HP commercial PCs from current and emerging threats. You will also work across the hardware and security architecture teams, collaborate with HP's Security Research Labs, Firmware (BIOS) team, our security business that creates and deploys industry leading enterprise security and manageability solutions, product management, manufacturing, supply chain, customer enablement, and field organizations to create cohesive system solutions that deliver unique customer value.

This position requires deep expertise in embedded systems, platform firmware, hardware, security, device manageability, and PC system architecture. The role also requires the ability to translate complex technical capabilities into customer-relevant value propositions and to influence internal and external stakeholders without relying solely on formal authority.

Responsibilities

• Serve as principal architect for HP Endpoint Security Controller roadmap, associated hardware and firmware based capabilities, cryptographic identity, attestation, secure communication, event logging, and future controller generations.
• Define and evolve HP Sure Start architecture and related firmware resilience capabilities, including hardware-enforced firmware authenticity, recovery, update, and protection mechanisms.
• Drive secure BIOS and firmware configuration management strategies, including HP Sure Admin ecosystem capabilities, key management, zero-touch provisioning, customer deployment models, and integration with enterprise management tools.
• Lead cross-functional architecture definition across hardware, BIOS, embedded controller firmware, diagnostics, cloud services, client software, manageability tools, product management, and customer-facing teams.
• Anticipate emerging threats and technology shifts, including quantum-safe cryptography, platform attestation, supply-chain security, physical tamper resistance, peripheral authentication, and new non-volatile memory architectures.
• Partner with silicon vendors, operating-system providers, standards organizations, internal and external security research teams, and internal product teams to influence and align platform security direction.
• Support customer briefings, field escalations, competitive positioning, technical marketing, training events, and executive communications related to HP commercial PC platform security.
• Create specifications, proof-of-concepts, validation tools, scripts, demonstrations, and reference implementations that accelerate adoption of new security capabilities.
• Mentor engineers and technical leaders by sharing architectural context, reviewing designs, developing talent, and helping teams make practical tradeoffs among security, cost, schedule, customer experience, and portfolio impact.

Education & Experience Recommended

• Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or equivalent practical experience.
• Extensive experience in PC, embedded, firmware, hardware, or platform system architecture, preferably in commercial client systems or security-sensitive devices.
• Demonstrated ability to architect solutions that span hardware, firmware, software, cloud services, manufacturing, and customer deployment environments.
• Deep technical understanding of BIOS/UEFI, embedded controllers, secure boot, firmware update and recovery flows, cryptographic signing, PKI based device identity, attestation, and secure configuration management.
• Experience defining product requirements, writing technical specifications, driving proof-of-concepts, and influencing roadmap decisions across multiple engineering teams.
• Ability to communicate complex technical ideas clearly to executive, engineering, customer, sales, and field audiences.
• Proven ability to lead through influence in a matrixed organization and to resolve ambiguity across competing business, technical, and customer priorities.

Preferred Qualifications

• Experience with hardware based roots of trust, platform certificates, DICE/SPDM concepts, supply-chain assurance, quantum-safe cryptography, secure element or embedded security controller identity, and compliance or certification frameworks.
• Experience with enterprise endpoint manageability platforms such as Intune, SCCM, device-management consoles, or cloud-based key management services.
• Hands-on capability with scripting or development tools such as PowerShell, C#, Python, Java, GitHub, Visual Studio Code, or similar environments.
• Experience with customer-facing technical briefings, sales enablement, competitive analysis, standards participation