linkedin
Security Engineer, Host Assurance
OpenAI
Seattle, QAT
Full Time
Senior
Hybrid
4 weeks ago
PKIHSMMachine IdentityApplied CryptographySecure BootFirmware Security
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
PKIHSMMachine Identity
About the Role
OpenAI seeks a Security Engineer to build trust foundations for bare-metal platforms. You will design and operate host assurance systems including machine identity, attestation, and secure bootstrap.
Key Skills for This Role
PKIHSMMachine IdentityApplied CryptographySecure BootFirmware Security
Responsibilities
- Design, build, and operate components of the Host Assurance platform that establish trust in bare metal hosts before they are eligible for production use
- Help ensure hosts are verifiably trustworthy from delivery and installation through secure bootstrap and readiness to join orchestration systems
- Build and improve systems such as machine identity, certificate issuance and enrollment, HSM backed or key management backed trust services, host attestation, measurement, and baseline verification tooling
- Validate delivered hardware and firmware against vendor claims and continuously detect and manage drift over time
- Eliminate insecure bootstrap patterns while preserving deployment throughput and operational reliability
- Contribute code, reviews, operational improvements, and design guidance for foundational trust services
- Help define observable, testable security properties for host platforms and improve telemetry and validation
- Participate in incident response, debugging, and post incident improvements for security critical infrastructure
- Work across different deployment models and provider boundaries while maintaining a consistent bar for host trust outcomes
Requirements
- Strong software engineering experience building and operating reliable production systems at scale
- Deep expertise in at least one relevant domain such as PKI, HSMs, machine identity, applied cryptography, secure boot, firmware or hardware security, host attestation, or low level platform security
- Comfortable working across systems boundaries, from services and APIs down to host, boot, firmware, or hardware adjacent trust mechanisms
- Can write production quality code and reason clearly about failure modes, operational safety, and long term maintainability
- Experience replacing fragile or manual security mechanisms with durable, paved path infrastructure
Full Job Posting
About The Team
- Security is foundational to OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity.
- The Security organization protects OpenAI’s technology, people, and products by building and operating deeply technical systems that must work reliably at massive scale.
- The Host Assurance team exists to make bare metal a dependable, scalable foundation for OpenAI: secure by default, verifiable in practice, and resilient across providers and operating models.
About The Role
- OpenAI is seeking a Security Engineer, Host Assurance to help build the trust foundations for bare metal platforms across OpenAI’s global infrastructure.
- Success requires strong technical judgment, ability to work comfortably at low levels of the stack, and a practical mindset for building systems that are secure, reliable, and usable in fast moving production environments.
- You will partner closely with infrastructure, research, and confidential computing initiatives.
In This Role, You Will
- Design, build, and operate components of the Host Assurance platform that establish trust in bare metal hosts before they are eligible for production use.
- Help ensure hosts are verifiably trustworthy from delivery and installation through secure bootstrap and readiness to join orchestration systems.
- Build and improve systems such as machine identity, certificate issuance and enrollment, HSM backed or key management backed trust services, host attestation, measurement, and baseline verification tooling.
- Validate delivered hardware and firmware against vendor claims and continuously detect and manage drift over time.
- Eliminate insecure bootstrap patterns while preserving deployment throughput and operational reliability.
- Contribute code, reviews, operational improvements, and design guidance for foundational trust services that must be dependable at scale.
- Help define observable, testable security properties for host platforms and improve the telemetry and validation needed to enforce them in practice.
- Participate in incident response, debugging, and post incident improvements for security critical infrastructure.
- Work across different deployment models and provider boundaries while maintaining a consistent bar for host trust outcomes.
You Might Thrive In This Role If You
- Have strong software engineering experience building and operating reliable production systems at scale.
- Have deep expertise in at least one relevant domain such as PKI, HSMs, machine identity, applied cryptography, secure boot, firmware or hardware security, host attestation, or low level platform security.
- Are comfortable working across systems boundaries, from services and APIs down to host, boot, firmware, or hardware adjacent trust mechanisms.
- Can write production quality code and reason clearly about failure modes, operational safety, and long term maintainability.
- Have experience replacing fragile or manual security mechanisms with durable, paved path infrastructure.
- Balance rigor with pragmatism, and care about making strong security controls deployable in real world environments.
- Are self directed, low ego, and willing to work across disciplines to solve the most important problems.
- Enjoy building in ambiguous spaces where the architecture is still emerging, stakes are at all time high, and the future is being built.
Workplace & Location
- This role is preferably based in San Francisco, CA or Seattle, WA.
- We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees.
Compensation Range
- $293K $385K
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at OpenAI
Security Engineer, Detection and Response
Seattle, QAT
SeniorFull Time
OpenAI seeks a Security Engineer for Detection & Response to protect sensitive assets by building detection systems and automating response. You will work across endpoints, cloud, and Kubernetes, partnering with infrastr
4 weeks agoView →
IT Support Specialist
New York, UAE
MidFull Time
OpenAI seeks an IT Support Specialist to serve as the first point of contact for hardware, software, and network troubleshooting. Responsibilities include resolving support requests, managing vendors, and improving IT pr
1 months agoView →
AI Success Engineer
Abu Dhabi, UAE
Fulltime
About the Team OpenAI’s AI Success Engineer team partners with the world’s most ambitious organizations to translate cutting edge AI into real business value. We guide customers from first deployment through scaled enter
2 months agoView →
AI Success Engineer
Abu Dhabi, UAE
Mid-SeniorFulltime
About The Team OpenAI’s AI Success Engineer team partners with the world’s most ambitious organizations to translate cutting edge AI into real business value. We guide customers from first deployment through scaled enter
2 months agoView →