Senior Confidential Computing Software Engineer; Kubernetes & Virtualization

ADVANCE YOUR CAREER. ADVANCE THE WORLD.

At AMD, we believe technology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMD is shaping the future.

ADVANCE YOUR CAREER. ADVANCE THE WORLD.

At AMD, we believe technology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMD is shaping the future.

Whether you’re designing next-gen processors, enabling AI breakthroughs, or bringing leading edge products to market, every role at AMD contributes to something bigger — technology that moves the world forward. Join us and, together, we’ll advance your career.

AMD’s SW Ecosystem Security Engineering Team is seeking a software engineer to deliver confidential computing enablement for AMD EPYC platforms, with primary emphasis on Kubernetes and Kube Virt-based confidential virtual machine support. The role focuses on making AMD SEV-SNP capabilities usable through open source virtualization and confidential computing stacks such as Kube Virt, Open Shift Virtualization, Kata Containers, Confidential Containers, VirTEE, Trustee, and related attestation components.

The developer will work across host, guest, hypervisor, orchestration, and container runtime layers to help turn AMD platform security features into production-ready software, validation, documentation, and partner-facing enablement. Success in this role requires strong systems software fundamentals, open source execution, and the ability to collaborate with upstream communities, OS vendors, and internal AMD stakeholders on technically rigorous solutions for confidential VMs, confidential containers, and AMD EPYC platform enablement.

The ideal candidate is a hands‑on systems engineer who can move comfortably between architecture, implementation, debug, test, and upstream review. They should be able to reason deeply about confidential VM behavior in Kube Virt‑based environments, including guest-owner trust boundaries, firmware and hypervisor interactions, attestation evidence, policy enforcement, secret handling, and the practical integration work required to expose AMD SEV‑SNP capabilities through open source virtualization stacks.

This person communicates clearly with maintainers, OS vendor partners, and internal stakeholders; identifies practical gaps in evolving upstream projects; and converts ambiguous platform enablement needs into accepted designs, working code, reliable tests, and clear technical guidance.

• Develop and upstream AMD SEV-SNP enablement for Kube Virt, including confidential VM configuration, libvirt/QEMU integration, guest launch flows, node feature discovery, and end-to-end validation.
• Implement confidential VM and attestation functionality across Kube Virt, VirTEE, Trustee, and related components, including secure workload launch, policy enforcement, evidence handling, and secret-release flows.
• Support confidential container enablement where it intersects with VM‑based trusted execution environments, including Kata Containers and Confidential Containers integration points.
• Debug integration issues across Linux, KVM, QEMU, libvirt, Kube Virt, guest firmware, attestation services, container runtimes, and platform configuration.
• Create and maintain CI coverage, hardware‑backed validation, functional tests, interoperability tests, and demonstrations for AMD confidential computing features.
• Collaborate with upstream maintainers, OS vendors, partner teams, and internal AMD stakeholders through design reviews, community discussions, roadmap alignment, and technical issue resolution.
• Develop AMD EPYC platform‑aware, such as Kubernetes, enablement where NUMA locality, cache hierarchy, CCD/CCX organization, SMT placement, CPU pinning, or device locality affect confidential VM performance, placement, or deployment predictability.
• Produce technical documentation, planning material, usage guidance, and proof‑of‑concept support for…