The hardware engineering team designs, builds, brings-up, tests and lands the hardware systems that power the facebook social network, deployed in our data centers worldwideDesigns are published for industry adoption through the open compute project foundation.we are looking for highly skilled engineers with experience in platform security hardware systems engineering for our infrastructure hardware engineering teamThe ideal candidate will operate in a highly multi-tasked, fast-paced and highly cross-functional engineering environmentThey will have hands-on experience with the development and adoption of platform security technologies and hardware system design, and with hardware, firmware and software integration for large scale deploymentsThey will have deep knowledge and experience in the design of scalable and fault-tolerant risk mitigation frameworks for critical hardware infrastructure systems; with domain knowledge spanning server, storage and network technologyThey will be data-driven and focus on the highest impact they can create as part of a world-class engineering teamThis is an opportunity to join our team and help us build some of the world’s most open, efficient and secure hardware platforms.
Collaborate with hardware engineering, firmware and software engineering and company wide infrastructure security teams to develop the hardware roadmaps and specifications for our platform security solutions for hardware systems.
Work hands-on with cross-functional partners to integrate hardware security solutionsThis includes integrating systems, achieving stability, performance and power requirements, and driving defects to resolution with our external supply chain and manufacturing partners and internal teams.
Influence the direction of the landscape of platform security through development and collaboration with open source firmware and hardware communities.
Drive specification, integration and validation of hardware-assisted security features such as intel txt, boot guard, verified boot, measured boot and attestationIn addition to driving specification and development of nist pfr compliant hardware root-of-trust solutions for datacenter storage, compute and networking appliances.
Perform in-depth analysis of facebook hardware infrastructure threat vector modeling for current and future facebook hardware designs and develop technical strategies for intrusion detection in platform firmware and peripheral devices.
Engage in vulnerability management for data center server, storage and networking systems.
Partner with external vendors on security solutions and security requirements, identify key threats and solutions, and plan and support penetration testing.
Coordinate incident response activities for critical hardware infrastructure systems.
Partner with data center site operations teams and npi tooling teams to understand installation, operation and maintenance considerations within facebook data centers and incorporate feedback into future hardware designs.
Collaborate closely with software and hardware sub-system subject matter experts to bring disparate technologies together to produce highly efficient, reliable and secure solutions.
Work as part of the hardware engineering team to design, develop, test and deploy hardware security solutions for facebook hardware platforms spanning server, storage and networking.
Bs or ms in computer science, computer engineering, electrical engineering or a related technical discipline or equivalent experience.
9+ years of industry experience in platform security and hardware systems engineering.
Expert level knowledge in platform security technology, including demonstrable depth in at least two areas out of the following technology domains: compute systems, storage systems, networking systems.
Knowledge of hardware solutions that crosses multiple technology domains and multiple subsystems and experienced in complex, multi-subsystem system-level troubleshooting, system performance analysis, and optimization practices and experience on in-depth software, firmware and hardware problems (e.gDebug wherever the problem leads and have the confidence to engage cross functional partners to support issue resolution.).
Experience learning new hardware technology, protocols, frameworks and understand firmware and software concerns/requirements.
Experience with deployment of hardware security at scale and identification and resolution planning for hardware threat analysis.
Familiarity with linux operating system internals (e.gKernel dev, tracing, profiling, scheduling, io subsystems), x86-based server hardware, storage, networking and io stacks, and large-scale infrastructure automation.
Demonstrated english language communications skills and proven pivot communication style and depth for the audience.
Detail oriented with careful and balanced rapid execution in a fast-paced environment.
Domain expertise in platform security technologies such as uefi secure boot, measured boot, intel txt and sgx-tem, arm trustzone etc.
Domain expertise in offensive hardware security techniques such as dma attacks, tpm reset attacks, coldboot attacks, spectre/meltdown and side-channel analysis.
Experience with cpld, fpga and/or asic development, specification of silicon level security feature definition and integration of complex logic with firmware.
Experience in specification and development of cryptographic protocols.
In-depth understanding of platform security standards and specifications such as tcg, opal, nist 800-193, pkcs and x.509.
Familiarity with opentitan, intel pfr, microsoft cerberus and other industry solutions for platform root of trust.
Knowledge of compute systems and memory buses (ddr4, ddr5, hbm, upi/qpi, etc.).
Understanding of storage protocols such as: nvme, nvmeof, sata or sas.
Knowledge of typical system io and management buses (pcie, cxl, i2c/smbus, lpc, etc.).
Experience with typical data center networking technologyEthernet, ipv4/v6, infiniband, roce, etc.
Experience in firmware development and debugging along with knowledge of system firmware development and system firmware configuration (bios, efi drivers, coreboot etc.).
Facebook`s mission is to give people the power to build community and bring the world closer togetherThrough our family of apps and services, we`re building a different kind of company that connects billions of people around the world, gives them ways to share what matters most to them, and helps bring people closer togetherWhether we`re creating new products or helping a small business expand its reach, people at facebook are builders at heartOur global teams are constantly iterating, solving problems, and working together to empower people around the world to build community and connect in meaningful waysTogether, we can help people build stronger communities - we`re just getting startedFacebook is proud to be an equal opportunity and affirmative action employerWe do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristicsWe also consider qualified applicants with criminal histories, consistent with applicable federal, state and local lawFacebook is committed to providing reasonable accommodations for candidates with disabilities in our recruiting processIf you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com#li-remote
