Sovereign Platform Engineer - Confidential Computing

Location:

Eindhoven, NL

Bull is a story. One with a century of European innovation and a working environment where experts design powerful, sustainable, and sovereign digital solutions, enabling states and industries to retain full control over their data and their AI.

Bull is also thousands of engineers, researchers and passionate tech people shaping the future of high‑performance computing, AI, and quantum technologies.

Every day, our teams push the boundaries of what is technologically possible – from next‑generation HPC architectures to exascale supercomputers – supported by world‑class R&D, more than 1,600 patents, and unique end‑to‑end capabilities spanning hardware design, software engineering, data science and quantum research.

We are a people‑centric, innovation‑driven company, where collaboration spans Europe, the Americas and India. We share a common vision of a responsible and sustainable innovation that delivers concrete impact for our customers.

We are looking for a Sovereign Platform Engineer - Confidential Computing to help build secure sovereign cloud and AI platforms powered by confidential computing technologies.

At Bull, you will join the Enterprise Computing & Networking Competency Centre (ECN), driving innovation across R&D, Product Management, Support & Delivery, Manufacturing, and the CTO Office. Working at the intersection of confidential computing, trusted hardware, sovereign cloud, and AI infrastructure, you will evaluate emerging technologies and transform them into scalable, production‑ready platform capabilities.

As a technical lead, you will drive the evaluation, validation, and industrialization of emerging sovereign platform technologies.

You will help ensure that:

• Sensitive data remains protected while in use through isolation and memory encryption
• Workloads are isolated from the host and hypervisor environment
• Platform operators cannot access confidential data
• Only verified and authorized workloads can access protected information

• Design and implement Kubernetes‑based platforms leveraging technologies such as Intel TDX, confidential containers, and Kata Containers
• Embed security‑by‑design principles including cryptography, secure boot, attestation, and secrets management
• Apply Zero Trust principles to workload identity, verification, and isolation
• Define reference architectures and deployable patterns for sovereign cloud environments
• Design lifecycle management, orchestration, and automation capabilities across private, hybrid, and sovereign cloud infrastructures

• Build prototypes and proofs of concept to evaluate emerging technologies
• Contribute to sovereign platform and DPU technology roadmaps
• Develop platform components and tooling using Go, Rust, Python, or C/C++
• Transform experimental concepts into validated assets ready for transfer to R&D
• Evaluate hardware/software integration across processors, accelerators, virtualization, containers, and orchestration layers

• Benchmark and optimize platform performance across hardware, virtualization, container, and orchestration layers
• Assess security versus performance trade‑offs
• Provide data‑driven recommendations to support architectural and product decisions

• Work with Kubernetes, KVM, QEMU, Kata Containers, Confidential Containers, attestation frameworks, and key management services
• Troubleshoot and improve components across the stack, including Linux system layers when required
• Contribute integrations, fixes, and enhancements aligned with platform objectives

• Collaborate closely with Cloud Distinguished Architects, customer teams, and technology partners
• Support the definition and prioritization of confidential computing use cases
• Influence platform roadmaps, product requirements, and technology directions
• Engage internal and external stakeholders to evaluate and validate emerging technologies

• 10+ years of experience in platform engineering, infrastructure, cloud,…