Sr. Staff Platform Security Engineer, Confidential Computing

About Groq Inference is the engine that powers AI, and Groq was built from the silicon up to deliver the world's fastest inference at scale. We pioneered the LPU—the first processor designed specifically for AI inference—and are transforming that innovation into a global cloud platform powering production AI workloads. With the capital, infrastructure, and team to execute, we're uniquely positioned to define the next era of AI infrastructure. The opportunity is massive, and it's still wide open. Now let's go build it! Mission: Build the hardware-rooted security foundations that protect sensitive AI workloads across hardware and software boundaries. You will set technical direction and build security capabilities spanning firmware security, hardware trust, attestation, trusted execution environments, and protected workload execution. As a senior technical leader, you will work close to the hardware layer and partner across hardware, firmware, systems, platform, and security engineering to solve complex security challenges at the foundation of the computing stack. Location: This role will be based in one of our three hiring hubs: the Dallas, San Francisco, or New York City area . The person hired for this role must be based in one of these three areas. You’ll have the flexibility to work remotely while we establish our local Groq office, with the expectation that this role will transition to onsite once the office opens. Responsibilities & opportunities in this role: Set technical direction and own architecture for security capabilities spanning hardware, firmware, systems software, and protected workload execution. Design and build security architectures for hardware-rooted trust, attestation, trusted execution environments, and hardware-backed isolation. Architect attestation capabilities that establish and verify trust across hardware, firmware, host, and workload boundaries. Partner deeply with hardware, firmware, and systems engineers to shape platform integrity, secure and measured boot, device identity, and other hardware-rooted security capabilities. Design security capabilities that enable protected workload execution while maintaining trust throughout the workload lifecycle. Design secure approaches for cryptographic key material, credentials, identity, certificates, and provisioning within trusted computing environments. Shape security for the lifecycle of trusted compute infrastructure, from provisioning and platform initialization through operation and decommissioning. Lead threat modeling and security analysis across hardware, firmware, host software, and workload execution, identifying systemic risks and driving durable mitigations. Develop systems software, security tooling, and automation that make hardware-backed security capabilities reliable and operable at scale. Lead security-sensitive designs across organizational boundaries, translating complex hardware and systems risks into practical…