AI Systems Security Architect - CA, San Diego, United States
Originally posted 4 September 2026 by the employer.
This role focuses on securing the platforms that run AI workloads in modern data center environments.
About the role
This role defines and drives security architectures for AI and datacenter systems, working across hardware, firmware, and software to protect AI workloads.
What you'll do
- Define and drive platform-wide security architecture across silicon, firmware, and software for AI and datacenter systems.
- Drive platform attestation architecture, including root of trust, measured boot, and remote verification.
- Drive system-wide threat modeling and security analysis across hardware, firmware, and software.
- Contribute to secure debug architecture and the protection of debug, test, and diagnostic interfaces.
- Write system architecture specifications for platform security features.
- Drive security assessment and audit readiness for AMD platforms.
What you'll need
- Experience in platform, system, or product security architecture with ownership at system scope.
- Understanding of computer architecture and platform composition, including CPU, accelerator, SoC systems, memory hierarchy, DMA, I/O subsystems, PCIe, and CXL.
- Experience with confidential computing and trusted execution environments, including memory encryption and VM isolation.
- Expertise in root of trust, secure boot, measured boot, and boot chain architecture, including DICE, SPDM, TPM/TCG concepts.
- Experience with firmware security, including runtime integrity, anti-rollback, secure update, and recovery design.
- Expertise in threat modeling, security architecture, and protocol design at platform scope.
- Knowledge and application of cryptographic algorithms, key hierarchies, and key management in hardware and firmware environments.
- Proficient in C/C++ and comfortable reading assembly.
Nice to have
- Experience securing AI/ML workloads and understanding their security requirements at datacenter scale, with familiarity with GPU and accelerator architecture, virtualization (SR-IOV, SIOV, MIG), and firmware.
- Experience with secure debug, JTAG and scan chain protection, fuse and lifecycle state management, and familiarity with side-channel and fault-injection analysis.
- Familiarity with supply-chain integrity practices (SBOM, build provenance) and open-source firmware projects (Caliptra, OpenBMC, coreboot, EDK II, openSIL).
- Experience supporting external security audits, red teams, or independent platform assessment.
- Knowledge of hardware security standards and frameworks (TCG, NIST, OCP).
- Awareness of post-quantum cryptography migration for firmware signing and device identity.
Skills: platform security architecture, root of trust, secure boot, measured boot, threat modeling, confidential computing
This role has been open 41 days — well below the 58-day median for Hardware Security Engineering roles.
Hardware Security Engineering · Hardware Security
|
Open roles in category
184
|
Median days open
58 d
|
Median salary
$229k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | AMD | All employers we track in this specialty (184 roles · 47 employers) |
|---|---|---|
| Open roles in this specialty | 8 | 184 |
| Median days open | 55 d | 58 d (−3 d vs this employer) |
| Median salary (USD postings) | — | $229k |
Skills observed across this category: platform security architecture, root of trust, secure boot, measured boot, threat modeling, confidential computing
Who's hiring in this category
- NVIDIA · 27 open roles · median 33 d
- NXP Semiconductors · 23 open roles · median 105 d
- Qualcomm · 17 open roles · median 119 d
- Arm Holdings · 13 open roles · median 99 d
- STMicroelectronics · 11 open roles · median 17 d
- AMD (this employer) · 9 open roles · median 41 d
How we counted: 184 open Hardware Security Engineering (Hardware Security) roles from 47 employers tracked in the SemiconductorJobs index, counted 15 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there. Figures refresh nightly.