Senior Platform Security Engineer - Device Trust, Attestation and Secure Browser

What you'll do

• Design and implement a device attestation service using hardware roots of trust like TPM 2.0 and Secure Enclave.
• Lead the engineering and rollout of the enterprise secure browser platform including access policies and DLP controls.
• Develop SRE agents to automate the monitoring, diagnosis, and remediation of security platforms.
• Define reference architectures that bind device trust to session trust across browser, CLI, and agentic workflows.
• Integrate device and browser trust signals into identity and access workflows for automated decision making.
• Scale platform-security capabilities across large, heterogeneous endpoint environments while maintaining performance and reliability.
• Establish service-level objectives, observability, and capacity planning for device-trust and secure-browser services.
• Lead incident response and implement durable corrective actions following post-incident reviews.

What we're looking for

• Bachelor's degree or Master's degree in Computer Science or a related field (or equivalent experience).
• 12+ years of experience in platform, infrastructure, or security engineering with depth in endpoint or platform security.
• Strong software development skills with a track record of shipping and operating production services.
• Experience designing, building, and owning large-scale distributed services or security platforms.
• Demonstrated experience automating operations at scale, including building self-healing systems and running services against defined SLOs.
• Solid understanding of Zero Trust architecture, device trust models, and endpoint attack techniques.
• Working knowledge of hardware or platform trust primitives such as TPM, Secure Enclave, measured boot, or TEEs.
• Excellent written and verbal communication skills to drive architectural decisions with senior and executive audiences.
• Experience building attestation or device posture services at enterprise scale (preferred).
• Deep understanding of TPM internals, remote attestation protocols, and device-bound credentials like DPoP, mTLS, or WebAuthn (preferred).
• Experience deploying enterprise browser stacks or secure web access tools such as Prisma Access Browser or Chrome Enterprise (preferred).
• Experience building AI agents or ML-assisted automation for reliability or security operations (preferred).