Engineering Manager, Integrity and Attestation

Anthropic's mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.

Anthropic's mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.

The Integrity and Attestation team's remit is to prove what is running at Anthropic: what code it is, where it came from, and whether the machine underneath it is in a known-good state. We build the systems that cryptographically verify build artifacts, model weights, and machines, from hardware roots of trust through firmware and boot to the credentials a workload receives.

We also secure the management plane of our servers. These controls protect our model weights and customer data across cloud providers and bare-metal AI data centers, including sites operated by partners.

We are hiring an Engineering Manager to lead this team. Anthropic is bringing up new compute quickly, across new hardware platforms and new partners, and each one has to meet the same bar. In this role you will set the team's charter, practices, and priorities. You will partner with our infrastructure, data center, and hardware teams, as well as outside vendors, so that integrity is designed in rather than added later.

The goal is simple to state: a machine gets secrets and workloads only after it proves it should, and a new site reaches that bar without slowing down compute.

• Own the integrity roadmap: threat model from silicon and firmware up through the operating system and workloads, decide what to build, and deliver it
• Be able to reason about the design and implementation of remote attestation, measured and verified boot, hardware roots of trust (TPM, SPDM), machine identity, and the reference values that define known-good
• Make attestation the default path, so machines receive credentials and join clusters only after proving their firmware