Staff Software Engineer (rust) - Confidential Computing Infrastructure

Staff Software Engineer (Rust) - Confidential Computing Infrastructure

At Fortanix we are pioneers in confidential computing and Confidential AI for hybrid and multicloud environments. We build technologies that protect sensitive data while it is in use -combining trusted execution environments (TEEs), advanced cryptography, and hardware-based isolation to secure applications, AI models, and data across clouds, on-premises infrastructure, and devices.

Our platform enables organizations to run and manage confidential workloads and AI, reduce data exposure risk, and adopt Zero Trust architectures with strong runtime protections. We partner closely with leading cloud and silicon providers and bring together experts in cryptography, systems, and distributed computing to solve some of the most challenging problems in protecting data in use.

We foster a collaborative, research-driven culture focused on advancing the state of the art in confidential computing and Confidential AI, enabling organizations to unlock the value of sensitive data while preserving privacy and security.

We're looking for a Staff Software Engineer (Rust) to join our Confidential Computing Management team - the group responsible for designing, building, and operating the confidential computing infrastructure that secures our Generative AI platform.

This is a deeply hands-on role focused on building Rust services and infrastructure that run inside and around trusted execution environments (Intel SGX, Intel TDX, AMD SEV) across hybrid and multi-cloud environments. You'll shape the architecture of a platform that enables secure, confidential AI workloads at scale.

Location: Santa Clara (CA)

What You'll Do

• Design and build Rust-based platform and infrastructure services for confidential computing environments
• Design and implement services that execute inside TEEs and integrate attestation, sealing, and confidential workload orchestration
• Architect and evolve our confidential computing infrastructure across hybrid and multi-cloud environments
• Build and operate Kubernetes-based confidential workload platforms
• Improve platform reliability, scalability, performance, and security posture
• Define infrastructure architecture and influence cross-team technical direction
• Mentor engineers in Rust, distributed systems, and confidential computing practices
• Drive production excellence: observability, resilience, deployment, and capacity planning

What You'll Work On

You will design, implement, and operate systems such as:

• Enclave-resident Rust services and supporting control-plane infrastructure
• Rust infrastructure services for confidential workload orchestration
• Secure scheduling, attestation, and key-management services
• Kubernetes operators and controllers for confidential workloads
• Confidential runtime and Runtime Encryption® components (SGX/TDX/SEV)
• Hybrid/multi-cloud deployment and isolation infrastructure
• High-assurance services requiring strong isolation and memory safety