Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Principal Security Architect role.

Rezi rewrites your resume against Graphcore's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Principal Security Architect posting at Graphcore — free, in seconds.

About the Role

As Principal Security Architect, you will define and lead the end-to-end hardware and firmware security strategy for Graphcore's next-generation AI server systems powered by Arm technology. You will establish security architecture across the system, from the system-on-chip and management controllers through firmware, virtualization, and container environments. Working within Advanced Architecture, you will protect AI models, training data, inference workloads, and platform intellectual property against remote, physical, and supply-chain threats. You will set technical direction, translate threat models into engineering requirements, and guide teams in delivering hardware-backed isolation, verified boot, secure lifecycle management, and attestation.

Responsibilities

Define the hardware and firmware security architecture for Arm-based AI server platforms and maintain a coherent security model across silicon, boards, firmware, virtualization, and system software.
Lead the build and integration of Arm's secure computing framework and Realm Management Extension technologies to protect AI models and data in use from operating systems, hypervisors, and other tenants.
Define platform, Baseboard Management Controller, and Rack Management Controller trust anchors, including secure boot, secure firmware update, device identity, provisioning, cryptographic key management, and lifecycle controls.
Specify security requirements for high-speed interfaces and interconnects, including PCIe Gen5 and Gen6 and NVMe Storage Integrity and Data Encryption, to protect data moving among CPUs, AI accelerators, storage, and memory.
Lead system-level threat modeling and define mitigations for side-channel attacks, fault injection, privilege escalation, physical tampering, and supply-chain risks.
Guide the design and hardening of UEFI, Arm Trusted Firmware, OpenBMC, and related low-level software, including device authentication based on the Security Protocol and Data Model.
Architect runtime audit, measurement, and remote attestation frameworks that provide verifiable evidence of platform identity, configuration, and software state.
Translate security goals into clear engineering specifications, design requirements, assurance criteria, and review processes for hardware and software teams.
Partner with silicon, hardware, firmware, networking, and systems teams to resolve security tradeoffs, review designs, and incorporate security requirements into technology roadmaps.
Evaluate emerging threats, standards, and technologies, and represent Graphcore's technical requirements in relevant open-source and industry communities where appropriate.

Requirements

An advanced degree or equivalent experience in computer science, computer engineering, cryptography, cybersecurity, or a related technical field, or equivalent practical experience.
Extensive experience in hardware security, system-on-chip security, platform architecture, or a closely related field, including technical leadership at Principal, Staff, or Lead Architect scope.
Deep knowledge of Arm architecture and security technologies, including Armv9, TrustZone, Confidential Compute Architecture, and the Realm Management Extension feature.
Demonstrated experience in crafting server or platform security frameworks that use trusted platform modules, roots of trust, hardware cryptography, secure provisioning, and lifecycle management.
Strong understanding of how hardware security primitives interact with firmware and system software, including Linux kernel internals, KVM, containers, and trusted execution environments.
Expert knowledge of hardware and platform threats, physical attack methods, side-channel risks, fault injection, and supply-chain vulnerabilities.
Experience with secure boot, firmware update security, cryptographic key management, device identity, attestation, and audit design.
Ability to convert complex security concepts and threat analyses into precise, testable engineering requirements and architecture decisions.
Proven track record to lead multi-functional technical work and influence senior engineers and leaders without direct authority.
Clear written and verbal communication skills, including the ability to explain risk, tradeoffs, and recommended controls to technical and executive audiences.

Skills

Arm architecture
Armv9
TrustZone
Confidential Compute Architecture
Realm Management Extension
Trusted platform modules
Roots of trust
Hardware cryptography
Secure provisioning
Lifecycle management
Linux kernel internals
KVM
Containers
Trusted execution environments
Hardware security
System-on-chip security
Platform architecture
Secure boot
Firmware update security
Cryptographic key management
Device identity
Attestation
Audit design
Threat modeling
Side-channel attacks
Fault injection
Privilege escalation
Physical tampering
Supply-chain risks
PCIe Gen5
PCIe Gen6
NVMe Storage Integrity and Data Encryption
UEFI
Arm Trusted Firmware
OpenBMC
Security Protocol and Data Model
Machine learning weights protection
Intellectual property protection
Dataset protection
Distributed training
Inference
Trusted Computing Group
Open Compute Project Security Project
Linux Foundation
Confidential Computing Consortium
Arm security working groups
SmartNIC security
Network isolation
Storage isolation
Post-quantum cryptography
Confidential computing technologies

Location

United States

Work Type

Hybrid working arrangements

Experience Level

Principal
Staff
Lead Architect

Education Level

Advanced degree or equivalent experience in computer science, computer engineering, cryptography, cybersecurity, or a related technical field

Benefits

Medical, dental, and vision coverage
Mental health, wellness, and employee assistance resources
Retirement savings benefits and company contributions
Paid vacation, sick time, company holidays, and parental or family leave
Life insurance and short-term or long-term disability coverage
Flexible working hours

About the Company

Graphcore is a global leader in artificial intelligence computing systems.
We design advanced semiconductors, software, and data center infrastructure that provide the specialized processing power needed to advance AI while improving the efficiency required for broad adoption.
As part of SoftBank Group, Graphcore belongs to a family of companies developing progressive technologies.
Our teams bring together AI researchers, silicon designers, software engineers, and systems architects to solve sophisticated technical problems across the computing stack.

Equal Opportunity

Graphcore is an equal opportunity employer.
We consider qualified applicants without regard to race, color, religion, creed, sex, pregnancy, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, veteran status, or any other status protected by applicable law.
Graphcore is committed to an inclusive and accessible hiring process.
If you need a reasonable accommodation to participate in the application or interview process, please let the recruiting team know.