Senior Confidential Compute Engineer: Kubernetes

AMD; Austin (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

AMD is seeking a software engineer for the SW Ecosystem Security Engineering Team to deliver confidential computing enablement for AMD EPYC platforms, with primary emphasis on Kubernetes and KubeVirt-based confidential VM support.

You will work across host, guest, hypervisor, orchestration, and container runtimes to productionize these features and collaborate with upstream communities, OS vendors, and internal AMD stakeholders on robust, production-ready solutions for confidential VMs and

Qualifications

• Bachelor’s or Master’s degree in Computer or Electrical Engineering or equivalent.
• Experience in Rust, Go, Python or Bash for Linux/virtualization.
• Hands-on with KubeVirt/OpenShift Virtualization or similar.
• Contributions to upstream open source projects.

Responsibilities

• Develop and upstream AMD SEV-SNP enablement for KubeVirt, including confidential VM configuration, libvirt/QEMU integration, guest launch flows, node feature discovery, and end-to-end validation.
• Implement confidential VM and attestation functionality across KubeVirt, VirTEE, Trustee, and related components, including secure workload launch, policy enforcement, evidence handling, and secret-release flows.
• Support confidential container enablement where it intersects with VM-based trusted execution environments, including Kata Containers and Confidential Containers integration points.
• Debug integration issues across Linux, KVM, QEMU, libvirt, KubeVirt, guest firmware, attestation services, container runtimes, and platform configuration.
• Create and maintain CI coverage, hardware-backed validation, functional tests, interoperability tests, and demonstrations for AMD confidential computing features.
• Collaborate with upstream maintainers, OS vendors, partner teams, and internal AMD stakeholders through design reviews, community discussions, roadmap alignment, and technical issue resolution.
• Develop AMD EPYC platform-aware, such as Kubernetes, enablement where NUMA locality, cache hierarchy, CCD/CCX organization, SMT placement, CPU pinning, or device locality affect confidential VM performance, placement, or deployment predictability.
• Produce technical documentation, planning material, usage guidance, and proof-of-concept support for confidential VM deployment and related confidential computing workflows.

Skills

Rust

Go

Python

Bash

Kubernetes

Linux

KVM

QEMU

libvirt

OpenShift Virtualization

Confidential computing

Education

Bachelor’s or Master’s degree in Computer or Electrical Engineering or equivalent

Tools

KubeVirt

OpenShift Virtualization

QEMU

libvirt

KVM

Job description

AMD is seeking a software engineer for the SW Ecosystem Security Engineering Team to deliver confidential computing enablement for AMD EPYC platforms, with primary emphasis on Kubernetes and KubeVirt-based confidential VM support.

You will work across host, guest, hypervisor, orchestration, and container runtimes to productionize these features and collaborate with upstream communities, OS vendors, and internal AMD stakeholders on robust, production-ready solutions for confidential VMs and