Engineering Manager, Hardware Platform Security

Polluxa, Inc.; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Polluxa, Inc. is seeking an engineering manager for Platform Security Engineering (PSE) within Data Center Security Engineering (DCSE) to lead a group responsible for firmware, platform trust, and host hardening across compute platforms.

You will own the group roadmap, grow the team, and ensure security posture from silicon root of trust to production gates, partnering with internal teams and external vendors.

Responsibilities

• Lead and grow the platform security engineering group: hiring, onboarding, development, performance, and prioritization for full-time engineers, and coordination of contractor and vendor engineers.
• Own the platform security roadmap and its delivery: hardware root of trust and attestation, secure and measured boot across CPU, BMC, accelerator, and peripheral firmware, OS and kernel hardening, and the host-side pipeline that turns attestation evidence into production gates.
• Own the firmware supply chain posture for the fleet: SBOM and reference integrity manifests, authenticated update, rollback protection, and the vendor relationships needed to get fixes shipped.
• Drive platform risk assessments for new compute platforms and providers, and make evidence-based go/no-go recommendations with bounded risk rather than perfect-or-nothing gates.
• Partner with infrastructure, fleet, compute, and detection and response teams so that platform controls land in production without degrading training or inference performance.
• Manage relationships with silicon vendors, OEMs, and compute providers: security requirements, vulnerability management, disclosure and remediation timelines, and upstream and standards-body engagement (TCG, OCP, IETF)

Job description

Polluxa, Inc. is seeking an engineering manager for Platform Security Engineering (PSE) within Data Center Security Engineering (DCSE) to lead a group responsible for firmware, platform trust, and host hardening across compute platforms.

You will own the group roadmap, grow the team, and ensure security posture from silicon root of trust to production gates, partnering with internal teams and external vendors.