Security Firmware Architect
Description
ADVANCE YOUR CAREER. ADVANCE THE WORLD.
At AMD, we believe technology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMD is shaping the future.
Whether you’re designing next-gen processors, enabling AI breakthroughs, or bringing leading edge products to market, every role at AMD contributes to something bigger — technology that moves the world forward. Join us and, together, we’ll advance your career.
THE ROLE:
AMD is looking for a Security Firmware Architect to join the Product Security Office (PSO) in securing the platforms that power the cloud, the data center, AI, and personal computing. Your role will be to define and drive security firmware architecture for AMD's confidential computing technologies, such as SEV-SNP, across AMD's product portfolio. You will work at the intersection of hardware, firmware, and software, designing security features that protect customer workloads, AI models, and data.
THE PERSON:
The ideal candidate is passionate about product security, spanning firmware, hardware, and software, with demonstrated experience in platform and/or device security architecture and confidential computing. You possess the leadership skills to drive sophisticated issues to resolution, learn new concepts quickly, and communicate effectively across AMD teams, customers, and industry partners in a cross-site, matrixed environment.
KEY RESPONSIBILITIES:
- Define and drive security firmware architecture across AMD's product portfolio
- Advance AMD's confidential computing and virtualization security technologies, including SEV-SNP, VM and tenant isolation, and trusted I/O, and help extend these capabilities across AMD's product portfolio
- Contribute to security architecture for emerging AI use cases, including agentic AI, with a focus on hardware-rooted trust, attestation, isolation, and protection of sensitive data processed by AI workloads and agents running on AMD platforms
- Lead end-to-end threat modeling, security analysis, and vulnerability assessment across hardware, firmware, and software
- Write architecture specifications for platform and firmware security features
- Engage with customers and ecosystem partners to capture security requirements, and develop documentation and training materials
- Maintain substantial knowledge of state-of-the-art security research and attacks, and contribute to industry standards, publications, and conferences
- Innovate with AI-assisted engineering tooling and workflows to accelerate security analysis, review, and documentation, and help establish how the team uses it
PREFERRED EXPERIENCE:
- Multiple years' experience in platform, firmware, or product security architecture, with demonstrated ownership of security architecture at system scope
- Experience with CPU confidential computing technologies and trusted execution environments (e.g., AMD SEV-SNP, Intel TDX, ARM CCA), including memory encryption, VM isolation, remote attestation, and sealing
- Deep understanding of computer architecture and SoC composition, including CPU, GPU, and NPU subsystems, memory hierarchy and caches, DMA, and I/O, with knowledge of x86 and/or ARM security and virtualization extensions
- Expertise in operating systems and virtualization, including Linux kernel and driver development, hypervisors, and containers
- Experience with hardware security modules, secure boot processes, and root of trust implementations
- Experience with secure firmware update mechanisms and attestation protocols
- Familiarity with interconnect standards (PCIe, CXL) and their security features, including trusted device assignment (TDISP, IDE)
- Knowledge and application of cryptographic algorithms, key hierarchies, and key management in hardware and firmware environments
- Proficient in C/C++ and comfortable reading assembly (AMD64 and/or ARM), with demonstrated fluency in AI-assisted and agentic development tooling in real engineering work
- Experience handling security vulnerabilities, including vulnerability assessment, CVSS scoring, mitigations, and external communications
- Familiarity with security considerations for on-device and data center AI workloads, including agent identity, authorization, and isolation, as well as GPU/NPU virtualization and attestation
ACADEMIC CREDENTIALS:
- Bachelor’s or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent
#LI-TB1
Benefits offered are described: AMD benefits at a glance.
AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.
AMD may use Artificial Intelligence to help screen, assess or select applicants for this position. AMD’s “Responsible AI Policy” is available here.
This posting is for an existing vacancy.