Software Engineer - Confidential Computing

Evans & Chambers; Virginia (MN); On-site; USD 100,000 - 140,000; Full time

Job summary

Evans & Chambers is seeking a Software Engineer specializing in Confidential Computing to work remotely with occasional meetings in Northern Virginia. This role involves designing encryption workflows, implementing services for attestation and secure key management, and developing APIs for trusted execution environments. Candidates should possess hands-on experience with confidential computing technologies and virtualized environments. The position offers a unique opportunity to contribute to secure AI systems for national security.

Qualifications

• Hands-on experience with confidential computing technologies (Intel TDX, AMD SEV‑SNP, or similar).
• Experience working with virtualized compute environments (KVM, VMware, or cloud Nitro-based VMs).
• Experience implementing PKI-based encryption workflows and working with cryptographic libraries (RSA, AES, envelope encryption).
• Familiarity with attestation services/APIs (Intel Trust Authority, NVIDIA NRAS).
• Experience with distributed systems, REST API development, and secure audit logging.

Responsibilities

• Design and implement a data encryption workflow, including DEK generation and envelope encryption.
• Design and implement services for attestation, validation, and secure key management.
• Develop APIs for validating trusted execution environments.
• Build mechanisms to enforce strong cryptographic protections, including key management.
• Implement robust audit logging and monitoring for sensitive operations.

Skills

Confidential computing technologies

Virtualized compute environments

PKI-based encryption workflows

Attestation services/APIs

Distributed systems

REST API development

Secure audit logging

Job description

Software Engineer - Confidential Computing

Location: Remote (occasional meetings in Northern Virginia)

Clearance: U.S. Citizenship required; security clearance preferred but not mandatory

Responsibilities

• Design and implement a data encryption workflow, including DEK generation, envelope encryption, and integration with HashiCorp Vault for key protection.
• Design and implement services that handle attestation, validation, and secure key management in confidential computing environments.
• Develop APIs for validating trusted execution environments and ensuring that workloads run only in approved, verified contexts.
• Build mechanisms to enforce strong cryptographic protections, including key management and encryption/decryption flows.
• Contribute to the design of systems that ensure end-to-end trust across CPU, GPU, and virtualized infrastructure.
• Implement robust audit logging and monitoring for sensitive operations.

Required Qualifications

• Hands‑on experience with confidential computing technologies (Intel TDX, AMD SEV‑SNP, or similar).
• Experience working with virtualized compute environments (KVM, VMware, or cloud Nitro-based VMs).
• Experience implementing PKI‑based encryption workflows and working with cryptographic libraries (RSA, AES, envelope encryption).
• Familiarity with attestation services/APIs (Intel Trust Authority, NVIDIA NRAS).
• Experience with distributed systems, REST API development, and secure audit logging.

Desired Qualifications

• Experience integrating with HashiCorp Vault (Transit engine, key management).
• Understanding of secure enclave workflows, GPU‑RSA, or NVTrust SDK.
• Knowledge of Zero Trust Architecture (ZTA) principles.
• TS/SCI security clearance preferred but not mandatory

Why Join Us

This is an opportunity to work on the cutting edge of confidential computing and secure AI/ML systems for national security. You’ll design systems that safeguard sensitive models and datasets while enabling secure collaboration across organizational boundaries.

All employment opportunities are made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status or any other basis protected by law.