Confidential Computing & Virtualization Senior Engineer

The Role: At Openchip, we're building the next generation of secure RISC-V processors, designed to power AI and data-intensive workloads with privacy and security at their core. As a Confidential Computing & Virtualization Senior Engineer, you will play a key role in designing and implementing cutting-edge security capabilities across the platform software stack. Working at the intersection of hardware and software, you'll help shape trusted execution environments, confidential computing technologies, virtualization, and secure accelerator offloading for next-generation computing platforms. This is an opportunity to work alongside world-class hardware architects, firmware engineers, and Linux experts to define secure platform architectures that will enable the future of confidential AI and trusted computing. Key Responsibilities: Design and develop secure platform technologies: • Design and develop Confidential Computing and virtualization technologies across the platform software stack, enabling trusted execution and secure workload isolation. • Design and implement Trusted Execution Environments (TEEs), remote attestation, and secure provisioning mechanisms for confidential workloads. • Develop and validate secure communication and isolation mechanisms between hosts, virtual machines, and hardware accelerators, enabling trusted offloading of sensitive workloads. Hardware and software co-design: • Collaborate with firmware and operating systems teams to integrate Confidential Computing technologies and Trusted Execution Environments across the platform software stack. • Partner with hardware architects to define security requirements and drive hardware/software co-design for next-generation secure platforms, virtualization technologies, and trusted accelerator architectures. Collaboration & contribution: • Participate in technical discussions, architecture reviews, and design decisions across multiple engineering teams. • Collaborate through code reviews, bug triaging, and design documentation to ensure high-quality software delivery. • Contribute to shared engineering responsibilities, including CI monitoring, documentation, issue resolution, and continuous improvement initiatives. Required qualifications & Skills: • Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related technical field. • 7+ years of experience in systems software, platform security, virtualization, or a related engineering field. • Strong understanding of computer architecture, including CPUs, cache and memory hierarchy, buses, and system-level interactions. • Solid understanding of Linux kernel internals and the pre-boot/boot process. • Strong programming skills in low-level languages such as C and Rust. • Experience with Git, CI pipelines, and development tools such as Jira. Experience in at least two of the following areas: • Confidential Computing (RISC-V CoVE, Intel SGX, Intel TDX, AMD SEV, Confidential Containers). • Virtualization technologies (KVM, QEMU, VFIO, virtio, SR-IOV, IOMMU). • Trusted Execution Environments (TEE) and hardware-enforced isolation mechanisms (TEE, TEE-IO, memory isolation, DMA protection, CHERI, CFI). • Remote attestation and trusted device communication protocols (SPDM, TDISP, PCIe IDE, DICE, attestation frameworks). Preferred • Experience with assembly programming (any architecture). • Linux kernel and/or device driver development. • Hypervisor technologies such as KVM, Xen, or QEMU. • System boot technologies including UEFI/EDK2, ACPI, U-Boot, and Device Tree. • Open-source software development and contributions to projects or security initiatives such as OpenSSF. • Firmware lifecycle management. • JTAG debugging, including secure key generation and management. • Experience working with hardware cryptography IPs. What do we offer? · Join an innovative team and experience company growth. · We believe in investing in our employees and providing them with the opportunities they need to grow and develop their careers. · Enjoy a hybrid work environment with flexible schedule. · Role based in Barcelona · We offer a remuneration that values your experience. We are looking for outstanding people willing to join our mission to change this industry and help to build a better world. If you feel identified with Openchip, please contact us. We can offer a competitive compensation package in a flexible work schema that will help you to keep a balance between your personal and professional life. At Openchip & Software Technologies S.L., we believe a diverse and inclusive team is the key to groundbreaking ideas. We foster a work environment where everyone feels valued, respected, and empowered to reach their full potential – regardless of race, gender, ethnicity, sexual orientation, or gender identity.