Sr. Staff Platform Security Engineer, Confidential Computing

About Groq

Inference is the engine that powers AI, and Groq was built from the silicon up to deliver the world's fastest inference at scale. We pioneered the LPU-the first processor designed specifically for AI inference-and are transforming that innovation into a global cloud platform powering production AI workloads.

With the capital, infrastructure, and team to execute, we're uniquely positioned to define the next era of AI infrastructure. The opportunity is massive, and it's still wide open. Now let's go build it!

Mission:

Build the hardware-rooted security foundations that protect sensitive AI workloads across hardware and software boundaries. You will set technical direction and build security capabilities spanning firmware security, hardware trust, attestation, trusted execution environments, and protected workload execution. As a senior technical leader, you will work close to the hardware layer and partner across hardware, firmware, systems, platform, and security engineering to solve complex security challenges at the foundation of the computing stack.

Location: We prioritize hiring in or near the SF Bay Area, New York City and Dallas.

Responsibilities & opportunities in this role:

• Set technical direction and own architecture for security capabilities spanning hardware, firmware, systems software, and protected workload execution.
• Design and build security architectures for hardware-rooted trust, attestation, trusted execution environments, and hardware-backed isolation.
• Architect attestation capabilities that establish and verify trust across hardware, firmware, host, and workload boundaries.
• Partner deeply with hardware, firmware, and systems engineers to shape platform integrity, secure and measured boot, device identity, and other hardware-rooted security capabilities.
• Design security capabilities that enable protected workload execution while maintaining trust throughout the workload lifecycle.
• Design secure approaches for cryptographic key material, credentials, identity, certificates, and provisioning within trusted computing environments.
• Shape security for the lifecycle of trusted compute infrastructure, from provisioning and platform initialization through operation and decommissioning.
• Lead threat modeling and security analysis across hardware, firmware, host software, and workload execution, identifying systemic risks and driving durable mitigations.
• Develop systems software, security tooling, and automation that make hardware-backed security capabilities reliable and operable at scale.
• Lead security-sensitive designs across organizational boundaries, translating complex hardware and systems risks into practical engineering decisions.
• Establish technical patterns and influence security direction across hardware, firmware, systems, platform, and security engineering.
• Partner across engineering and security to build capabilities that strengthen customer trust, platform reliability, and support compliance requirements.
• Clearly communicate trust models, security architecture, technical tradeoffs, and risk to engineers, technical leaders, and security leadership.

Ideal candidates have/are:

• 6+ years of systems, firmware, hardware, or security engineering experience, with deep expertise in low-level systems security and experience with hardware-rooted trust, attestation, trusted execution environments, confidential computing, or related technologies.
• Demonstrated experience setting technical direction and owning complex security architecture spanning multiple layers of the hardware and software stack.
• Deep expertise in firmware security, hardware-rooted trust, attestation, trusted execution environments (TEEs), protected workload execution, or closely related low-level security domains.
• Deep understanding of hardware-rooted trust, including roots of trust, platform integrity, secure or measured boot, device identity, and hardware-backed attestation.
• Experience designing or implementing attestation systems and reasoning about trust across hardware, firmware, host, and workload boundaries.
• Strong understanding of firmware and low-level systems security, including boot chains, platform integrity, and security boundaries between hardware and software.
• Strong understanding of cryptographic systems, key management, certificate lifecycle, secure credential management, and secure provisioning in trusted computing environments.
• Strong systems engineering skills, with experience developing low-level systems software, security tooling, firmware, or production automation in languages such as C, C++, Rust, Go, Python, or similar languages.
• Ability to threat model complex systems and reason about attacks spanning hardware, firmware, operating systems, infrastructure, and application workloads.
• Experience leading ambiguous, cross-functional technical initiatives and influencing engineering direction across highly specialized engineering disciplines.
• Ability to communicate complex trust models, security architecture, and technical risk clearly to different audiences.
• Experience developing or securing firmware, platform initialization, device security, or hardware-backed security mechanisms is valuable.
• Experience integrating hardware-rooted trust, attestation, or confidential computing capabilities with higher-level infrastructure, identity, key-management, or workload systems is valuable.
• Experience with bare-metal lifecycle security or securing large-scale compute environments is valuable.

Why Join Us

• Purposeful Hiring: You’re not here by accident, and neither is anyone else. Every teammate is handpicked with intention because who we build with matters.
• Builders Wanted: You’re not just riding the rocket ship, you’re building it. Your work directly shapes the trajectory of our company.
• Mission-Driven Work: We’re here to make a real impact. Our mission fuels everything we do.
• Tackling Hard Problems: If easy isn’t your thing, you’re in the right place. We solve some of the most complex and exciting challenges in our space.
• Excellence Is The Standard: High performance isn’t just encouraged, it’s the baseline. And it’s contagious.

If this sounds like you, we’d love to hear from you!

Compensation

Groq is committed to providing competitive compensation through our Total Cash philosophy, which incorporates potential bonus value directly into base pay. The total cash salary range for this position, which is inclusive of the potential bonus value, is $341,400 - $401,600, with individual placement determined by your geographic location, experience, skills, and alignment with internal compensation standards. This range is specific to candidates located in the United States. Compensation for international candidates will vary based on local market dynamics. Beyond cash compensation, Groq also offers a Long-Term Incentive (LTI) Program and a robust suite of employee benefits.

US Job Posting

This position may require access to technology and/or information subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). To comply with these requirements, candidates for this role must meet certain citizenship or residency criteria. Specifically, they must qualify as U.S. Persons for export control purposes (i.e., U.S. citizen, U.S. lawful permanent resident (Green Card holder), or a protected individual under 8 U.S.C. § 1324b(a)(3) such as a refugee or asylee), or otherwise be eligible for an applicable export license.

Groq is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex (including gender identity, sexual orientation, and pregnancy), age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable law.

Groq complies with all applicable federal, state, and local laws governing nondiscrimination in employment. We do not tolerate discrimination or harassment based on any protected characteristic.

Groq iscommitted to working with and providing reasonable accommodations to qualified individuals with physical or mental disabilities. If you require a reasonable accommodation to complete an application or to participate in the hiring process, please contact us at [email protected]. This contact is for accommodation requests only, which will be considered on a case-by-case basis.

All offers of employment are contingent upon verification of the applicant’s identity and employment authorization in accordance with federal law.

Groq encourages people with criminal record histories to apply for employment, and values diverse experiences, including prior contact with the criminal legal system. To that end, Groq welcomes such applicants in accordance with the California Fair Chance Act, Los Angeles City Fair Chance Act Ordinance, Los Angeles County Fair Chance Act Ordinance, and San Francisco Fair Chance Act Ordinance. Philadelphia applicants can review information pertaining to Philadelphia’s Fair Criminal Record Screening Standards Ordinance here: https://www.phila.gov/documents/fair-chance-hiring-law-poster.

As part of our hiring process, Groq may use artificial intelligence (“AI”) tools or automated systems to assist with activities such as reviewing applications, evaluating qualifications, scheduling interviews, analyzing assessment responses, or supporting recruiting operations. These tools are designed to assist-not replace-human decision-making, and hiring decisions are subject to human review. We may process information you provide during the application process, including resumes, application materials, interview responses, assessments, and, where applicable, audio, video, or transcript data. If legally required, we will request consent before using technologies that analyze biometric or video interview data. Candidates may request reasonable accommodations, an alternative evaluation process, additional information regarding the use of AI in the hiring process, or review of certain automated decisions by contacting [email protected].