Confidential Computing & Virtualization Senior Engineer

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related technical field.

• 7+ years of experience in systems software, platform security, virtualization, or a related engineering field.

• Strong understanding of computer architecture, including CPUs, cache and memory hierarchy, buses, and system-level interactions.

• Solid understanding of Linux kernel internals and the pre-boot/boot process.

• Strong programming skills in low-level languages such as C and Rust.

• Experience with Git, CI pipelines, and development tools such as Jira.

Experience in at least two of the following areas:

• Confidential Computing (RISC-V CoVE, Intel SGX, Intel TDX, AMD SEV, Confidential Containers).

• Virtualization technologies (KVM, QEMU, VFIO, virtio, SR-IOV, IOMMU).

• Trusted Execution Environments (TEE) and hardware-enforced isolation mechanisms (TEE, TEE-IO, memory isolation, DMA protection, CHERI, CFI).

• Remote attestation and trusted device communication protocols (SPDM, TDISP, PCIe IDE, DICE, attestation frameworks).

• Experience with assembly programming (any architecture).

• Linux kernel and/or device driver development.

• Hypervisor technologies such as KVM, Xen, or QEMU.

• System boot technologies including UEFI/EDK2, ACPI, U-Boot, and Device Tree.

• Open-source software development and contributions to projects or security initiatives such as OpenSSF.

• Firmware lifecycle management.

• JTAG debugging, including secure key generation and management.

• Experience working with hardware cryptography IPs.

At Openchip, we're building the next generation of secure RISC-V processors, designed to power AI and data-intensive workloads with privacy and security at their core.

As a Confidential Computing & Virtualization Senior Engineer, you will play a key role in designing and implementing cutting-edge security capabilities across the platform software stack. Working at the intersection of hardware and software, you'll help shape trusted execution environments, confidential computing technologies, virtualization, and secure accelerator offloading for next-generation computing platforms.

This is an opportunity to work alongside world-class hardware architects, firmware engineers, and Linux experts to define secure platform architectures that will enable the future of confidential AI and trusted computing.

• Design and develop Confidential Computing and virtualization technologies across the platform software stack, enabling trusted execution and secure workload isolation.

• Design and implement Trusted Execution Environments (TEEs), remote attestation, and secure provisioning mechanisms for confidential workloads.

• Develop and validate secure communication and isolation mechanisms between hosts, virtual machines, and hardware accelerators, enabling trusted offloading of sensitive workloads.

• Collaborate with firmware and operating systems teams to integrate Confidential Computing technologies and Trusted Execution Environments across the platform software stack.

• Partner with hardware architects to define security requirements and drive hardware/software co-design for next-generation secure platforms, virtualization technologies, and trusted accelerator architectures.

Collaboration & contribution:

• Participate in technical discussions, architecture reviews, and design decisions across multiple engineering teams.

• Collaborate through code reviews, bug triaging, and design documentation to ensure high-quality software delivery.

• Contribute to shared engineering responsibilities, including CI monitoring, documentation, issue resolution, and continuous improvement initiatives.