Platform Security Engineer: DRTM & Firmware Security

United States Digital Space LLC; San Francisco (CA, WA); Hybrid; USD 320,000 - 405,000; Full time

Job summary

United States Digital Space LLC is building the platform security foundation for frontier model infrastructure. This role owns DRTM across x86 and ARM, delivering attestation and isolation capabilities while hardening the platform at firmware, bootloader, kernel, and silicon levels.

You will collaborate with firmware security, hardware, and OS hardening engineers, engage with vendors and OEMs, and contribute upstream to Linux Secure Launch and related projects.

Qualifications

• Measured boot, roots of trust, TPM 1.2/2.0 concepts and measurement chains.
• Strong C and assembly skills with Linux kernel and early-boot knowledge.
• Experience landing upstream work in Linux, TianoCore, or GRUB.
• Hardware/firmware boundary troubleshooting with debugging tooling (JTAG, serial).
• Cross-functional leadership with external vendors and OEMs.
• Clear written communication and public technical writing.

Responsibilities

• Own adoption and integration of DRTM hardware security features across x86 and ARM.
• Implement attestation services and privacy capabilities enabled by DRTM.
• Design bootloader-agnostic solutions to initiate and relaunch DRTM sessions.
• Hardening of DRTM solutions including SMM isolation and ACPI handling.
• Interface with vendors and OEMs to refine requirements and feasibility.
• Publish work upstream and help maintain Linux Secure Launch leadership.
• Act as technical lead in architecture and disseminate work via papers and talks.
• Support open source efforts and upstream interactions.
• Build and harden platform security features like TDX and SEV.
• Develop drivers for custom hardware and diagnose firmware issues.
• Debug kernel and system-level issues on production hardware.
• Pursue investigative work in new technical areas (dTPMs, fTPMs).

Skills

Measured boot), DRTM experience

Job description

United States Digital Space LLC is building the platform security foundation for frontier model infrastructure. This role owns DRTM across x86 and ARM, delivering attestation and isolation capabilities while hardening the platform at firmware, bootloader, kernel, and silicon levels.

You will collaborate with firmware security, hardware, and OS hardening engineers, engage with vendors and OEMs, and contribute upstream to Linux Secure Launch and related projects.