Principal Engineer, Infrastructure Trust

Google LLC; Sunnyvale (CA); On-site; USD 307,000 - 427,000; Full time

Job summary

Google LLC in Sunnyvale, CA is seeking a Principal Engineer for Infrastructure Trust to architect resilient distributed platforms and bridge physical and logical security.

You will lead technical strategies to ensure the absolute integrity of Google's core infrastructure, enabling hosting of AI models in untrusted environments and protecting third-party models and customer data with strong security principles.

Qualifications

• Bachelor’s degree in Computer Science or related field or equivalent practical experience.
• 15 years of experience as a software engineering leader.
• Experience with technical innovation within cross-functional engineering environments.
• Experience in data center security, networking security, hardware security, or operating system security.

Responsibilities

• Architect resilient distributed platforms and bridge the gap between physical and logical security.
• Lead technical strategies to ensure the absolute integrity of Google's core infrastructure.
• Help Google leverage untrusted environments to host critical assets including AI models, and enable hosting and protection of third-party models and customer data.
• Navigate complex cross-organizational boundaries, influence key stakeholders, and serve as a technical bridge across Google's broader engineering units.
• Address expanding industry challenges, including securing multi-cloud workloads and guardrails for AI agents.

Job description

Principal Engineer, Infrastructure Trust

Share Principal Engineer, Infrastructure Trust

Google Sunnyvale, CA, USA Director+

• Bachelor’s degree in Computer Science or related field or equivalent practical experience.
• 15 years of experience as a software engineering leader.
• Experience with technical innovation within cross-functional engineering environments.
• Experience in data center security, networking security, hardware security, or operating system security.

Preferred qualifications:

• Master’s degree or PhD in Computer Science or related field.
• Proven track record of inter-team/cross-functional leadership, with the ability to influence C-level stakeholders and align technical roadmaps across product groups.
• Deep expertise in hardware vulnerabilities and physical data center security.
• Demonstrated success in leading initiatives around confidential compute, physical-logical boundaries, and securing third-party/on-premise environments.
• Strong awareness of industry trends in AI infrastructure threats and how to apply guardrails for AI agents at an infrastructure level.
• Credibility as an engineering leader who can guide and structure a team of technical leads across broad and complex security domains.

About the job

The Infrastructure Trust team is seeking a highly independent and visionary Principal Engineer to architect resilient distributed platforms and bridge the gap between physical and logical security.

In this role, you will lead technical strategies to ensure the absolute integrity of our systems, transforming Google's core infrastructure. You will help Google leverage untrusted environments to host critical assets including AI models, and also enable Google to host and protect third party’s models and customer data safely and privately. Grounded in deep foundational security principles, you will bring the credibility and executive presence required to navigate complex cross-organizational boundaries, influence key stakeholders, and serve as a technical bridge across Google's broader engineering units.

You will creatively address expanding industry challenges, including securing multi-cloud workloads, mitigating AI infrastructure threats, and establishing guardrails for AI agents, while acting as a technical bridge across Google's broader engineering organizations.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

About the job

The Infrastructure Trust team is seeking a highly independent and visionary Principal Engineer to architect resilient distributed platforms and bridge the gap between physical and logical security.

In this role, you will lead technical strategies to ensure the absolute integrity of our systems, transforming Google's core infrastructure. You will help Google leverage untrusted environments to host critical assets including AI models, and also enable Google to host and protect third party’s models and customer data safely and privately. Grounded in deep foundational security principles, you will bring the credibility and executive presence required to navigate complex cross-organizational boundaries, influence key stakeholders, and serve as a technical bridge across Google's broader engineering units.

You will creatively address expanding industry challenges, including securing multi-cloud workloads, mitigating AI infrastructure threats, and establishing guardrails for AI agents, while acting as a technical bridge across Google's broader engineering organizations.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

US: $307000 - $427000 (USD) + 30% bonus target + equity + benefits

Learn more about benefits at Google .

• Lead the paradigm shift to securely deploy workloads in untrusted environments.
• Define technical isolation and verification frameworks to safely execute untrusted code at scale including guiding creation of technical isolation solutions for jobs running on a single machine, within a data center, or across data centers.
• Design defensive architectures responsive to sophisticated threats, specifically addressing the offensive use of AI by both external and internal actors.
• Address emerging multi-cloud workload risks, secure AI training/inference infrastructure, and establish safe execution guardrails for autonomous AI agents.
• Design defensive architectures responsive to sophisticated threats, specifically addressing the offensive use of AI by both external and internal actors.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.