Senior Platform Security Architect – RoT & Secure OTA

Socket.dev; Sunnyvale (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Neurophos seeks a Principal Platform Security Architect to own platform security across EIC and the T100 system. This is a product security role, not IT security.

The candidate will manage RoT, secure boot, device attestation, signed firmware updates, and security telemetry, interfacing with RTL designers and firmware engineers. The role requires shipping RoT subsystems and fluency with datacenter compliance, plus collaboration with digital design, firmware, and systems teams to land security

Qualifications

• Bachelor’s/Master’s/PhD in CS or EE or related field.
• 10+ years in hardware and firmware security architecture on silicon that shipped.
• Hands‑on experience integrating root‑of‑trust IP and provisioning.
• Secure boot chain design and firmware resiliency per SP 800-193.
• Knowledge of SPDM, DICE, MCTP, PLDM.
• Cryptographic primitives and secure key storage in silicon.
• Ability write security specs for design/firmware teams.
• Excellent communication; defend architectural decisions.

Responsibilities

• Own platform threat model and security architecture from fab to field.
• Architect silicon root of trust integration and OTP planning.
• Define secure/measured boot chain and firmware resiliency.
• Oversee device attestation with SPDM and DICE.
• Define signed OTA firmware updates with anti-rollback protection.
• Specify security telemetry and exposure to data center operators.
• Drive compliance with OpenCompute Project security profiles and DMTF specs.
• Own key management lifecycle for manufacturing and field processes.
• Serve as technical owner for outsourced root-of-trust engagements.
• Support hyperscaler security reviews and defend security narratives.

Skills

Hardware security architecture

Firmware security

Root-of-trust integration

Secure boot design

Threat modeling

Security architecture documentation

Communication with external reviewers

Education

BS/MS/PhD in Computer Science or Electrical Engineering

Tools

SPDM

DICE

MCTP

PLDM

Job description

Neurophos seeks a Principal Platform Security Architect to own platform security across EIC and the T100 system. This is a product security role, not IT security.

The candidate will manage RoT, secure boot, device attestation, signed firmware updates, and security telemetry, interfacing with RTL designers and firmware engineers. The role requires shipping RoT subsystems and fluency with datacenter compliance, plus collaboration with digital design, firmware, and systems teams to land security