Opaque Systems develops a Confidential AI platform that provides cryptographically verifiable privacy, policy enforcement, and model integrity for enterprises running AI on sensitive data.
<div class="content-intro"><p><strong data-stringify-type="bold">About OPAQUE</strong><br>OPAQUE is the Confidential AI company. Born from UC Berkeley’s RISELab, we solve the core challenge blocking AI adoption at scale: security concerns about data leaks or compliance violations. OPAQUE provides verifiable privacy and governance for AI so organizations can safely run models, agents, and workflows on their most sensitive data. Its Confidential AI platform delivers verifiable runtime governance backed by cryptographic proof that data, models, and agent actions remain private, governed, and compliant with approved policies throughout every AI workflow. This extends traditional data governance tools with real runtime verification, enabling teams to responsibly deploy AI using their most valuable proprietary data, and move from pilot to production 4-5X faster. Customers and partners include ServiceNow, Anthropic, Encore Capital, Accenture, and leaders across high tech, financial services, insurance, and healthcare.</p> <p>Learn More at <a href="http://opaque.co/">Opaque.co</a></p> <p>Read about our Values at <a href="http://opaque.co/about">Opaque.co/about</a></p> <p> </p></div><h2><span style="font-weight: 400;">ABOUT THIS JOB</span></h2> <p><span style="font-weight: 400;">As a Staff Engineer at Opaque Systems, you will play a critical role in shaping the architecture and driving the technical direction of the core OPAQUE platform, with a focus on the confidential computing infrastructure. You’ll collaborate closely with cross-functional teams to design, develop, and scale solutions for confidential AI. This is an opportunity to solve complex technical challenges while making a significant impact on the development of next-generation technologies.</span></p> <p><strong>Key Responsibilities</strong></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Lead the design, architecture, and implementation of core software components for Opaque’s confidential computing platform</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Design, implement, and maintain </span><span style="font-weight: 400;">end-to-end attestation services and infrastructure</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Lead integration of TEE technologies (CNCF CoCo, hyperscaler CC offerings) with OPAQUE's platform</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Design and operate multi-cloud CC deployments at the Kubernetes platform layer — runtime classes, TEE node pools, custom admission controllers, and service mesh security for confidential workloads</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Define and enforce cryptographic standards: key derivation, signing schemes, secure channel establishment, and secrets management within TEE boundaries</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Drive code quality and security review standards across the security engineering team — review at the correctness and side-channel level, not just design</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Collaborate with product, engineering, and AI teams to deliver scalable, high-performance, and secure solutions.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Drive technical excellence across the engineering team, setting best practices for coding, architecture, testing, and deployment.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Mentor and guide junior engineers, fostering a culture of continuous improvement and technical innovation.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Work closely with stakeholders to define technical requirements and ensure alignment with business objectives.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Optimize system performance, scalability, and fault tolerance while ensuring the security and privacy of data in all phases of computation.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Stay ahead of industry trends and advancements in confidential AI and confidential computing</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Act as a key decision-maker in technical strategies, contributing to both tactical and strategic goals.</span></li> </ul> <p><strong>Qualifications</strong></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">10+ years of software engineering experience, with a focus on distributed systems, cloud computing, or security.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Deep hands-on experience in confidential computing / TEE technologies (e.g., CNCF CoCo)</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Fluency in attestation protocols: attestation quote generation and verification, RATS (RFC 9334), EAT/EAR standards</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Systems programming at production scale in Go and/or Rust; kernel modules, ioctl interfaces, or TEE SDK integration code a strong plus</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Cloud-native platform depth — Kubernetes operators, custom admission controllers, runtime classes, and TEE workload orchestration across multiple clouds</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Cryptographic engineering fundamentals: key hierarchies, AEAD schemes, digital signatures, and the ability to reason about threat models at the hardware boundary</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Expertise in system architecture and design, with a strong understanding of scalability, fault tolerance, and performance optimization.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Proven track record