Qualcomm Cloud BU is seeking an experienced System Software Engineer (Security) to develop secure computing environments for Edge and Data Center use cases, targeting Qualcomm’s next generation high-performance inference accelerator. This role focuses on expanding the Trusted Execution Environments (TEE) on server platforms and enabling our hardware-assisted inference accelerator as a trusted device. You will design and integrate solutions to protect sensitive workloads in TDISP and SR-IOV-compliant Trusted VMs across multi-tenant deployments.   

Candidate should have a background in cloud computing or on-prem server security systems, with experience in confidential computing, virtualization, and secure execution environments. Familiarity with platforms such as Intel TDX, AMD SEV-SNP, ARM CCA or AWS Nitro Enclaves is highly desirable.  

Key Responsibilities: 

• Collaborate with hardware, firmware, host software and application teams to deliver end-to-end Confidential Compute solutions.
• Integrate and validate TDISP-compliant trusted device assignment and lifecycle management for secure inference acceleration.  
• Integrate and validate SR-IOV-based secure execution environment for PCIe devices, supporting isolation, attestation, and multi-tenant deployments.
• Extend open-source OS/hypervisors (e.g., Linux, QEMU, KVM) to support confidential workload security extensions and validate solutions across various virtualization technologies and TEEs. 
• Work with server security technologies such as TPM, secure provisioning, firmware integrity, and platform-level attestation. 
• Contribute to threat modeling, risk assessments, and compliance alignment with industry standards TDISP, OCP, TCG, and Confidential Computing Consortium.
• Participate in system bring-up, debugging, and performance tuning across heterogeneous compute environments. 

Required Qualifications:

• 3+ years of experience in embedded systems, Linux kernel development, and linux/server security.
• Experience of cryptographic primitives and best practices, including key management and certificates
• Knowledge of threat modeling, network/cloud security, and Linux container/VM security.
• Designs and manages virtualized environments using platforms like VMware, KVM, Hyper-V.
• Ability on kernel level or hardware-firmware level debugging using tools like JTAG, logic analyzers, and protocol analyzers.
• Strong analytical skills and integration capabilities. A passion for solving challenging, low-level problem.

Preferred Skills/Experience:

• Experience with cloud infrastructure or server systems engineering, within the security or virtualization domains.
• Expertise in ARM architecture and/or RISC-V architecture.
• Knowledge of PCIe architecture, including DMA, MMIO, mailbox and endpoint configuration.
• Experience with server security technologies such as cryptographic protocols, secure boot, attestation, TPM. 
• Experience designing or integrating secure GPU acceleration within enclave-based architectures.