6 days ago
Responsibilities
- Develop and upstream AMD SEV-SNP enablement for KubeVirt, including confidential VM configuration, libvirt/QEMU integration, guest launch flows, node feature discovery, and end-to-end validation.
- Implement confidential VM and attestation functionality across KubeVirt, VirTEE, Trustee, and related components, including secure workload launch, policy enforcement, evidence handling, and secret-release flows.
- Support Kata Containers and Confidential Containers integration for VM-based trusted execution environments.
- Debug integration issues across Linux, KVM, QEMU, libvirt, KubeVirt, guest firmware, attestation services, container runtimes, and platform configuration.
- Create and maintain CI coverage, hardware-backed validation, functional tests, interoperability tests, and demonstrations.
- Collaborate with upstream maintainers, OS vendors, partners, and internal stakeholders through design reviews, community discussions, roadmap alignment, and technical issue resolution.
- Develop AMD EPYC and Kubernetes enablement addressing NUMA locality, cache hierarchy, CCD/CCX organization, SMT placement, CPU pinning, and device locality.
- Produce technical documentation, planning materials, usage guidance, and proof-of-concept support.
Requirements
- Bachelor’s or master’s degree in Computer or Electrical Engineering, or equivalent.
- Systems software development experience in Rust, Go, Python, and Bash for Linux, virtualization, or cloud-native infrastructure projects.
- Technical proficiency with Kubernetes, Linux, KVM, QEMU, libvirt, guest firmware, VM lifecycle management, and debugging across host, guest, hypervisor, and container layers.
- Hands-on experience with KubeVirt, OpenShift Virtualization, Red Hat OpenShift Virtualization, or comparable open-source virtualization environments.
- Experience with AMD SEV-SNP, SEV, SEV-ES, confidential VMs, confidential containers, trusted execution environments, or guest-owner trust models.
- Working knowledge of attestation evidence, VCEK handling, policy configuration, and secret-release workflows.
- Track record contributing code, tests, documentation, design proposals, or reviews to upstream open-source projects.
- Experience developing CI, end-to-end tests, hardware-backed validation, demonstrations, or technical guides for virtualization or platform enablement.
- Experience collaborating with OS vendors, software partners, ISVs, customers, or upstream engineering teams.
- Understanding of x86 or AMD EPYC architecture concepts relevant to confidential VM placement and performance, including memory encryption, NUMA topology, cache hierarchy, CPU pinning, SMT placement, and device locality.
Benefits
- Hybrid work arrangement is indicated by the posting.
- AMD benefits are described through its benefits-at-a-glance materials.
- This role is not eligible for visa sponsorship.
About AMD
We care deeply about transforming lives with AMD technology to enrich our industry, our communities, and the world. Our mission is to build great products that accelerate next-generation computing experiences – the building blocks for the data center, artificial intelligence, PCs, gaming and embedded. Underpinning our mission is the AMD culture. We push the limits of innovation to solve the world’s most important challenges. We strive for execution excellence while being direct, humble, collaborative, and inclusive of diverse perspectives. AMD together we advance_