Software Security Architect, Operating Systems | Consumer Devices
Security Engineer · Senior · Full Time
Opens OpenAI's application page
Role
What you'll do.
Lead the security architecture for OpenAI's next-generation consumer operating system, defining trust models, privilege boundaries, and hardware-backed protections. This senior, hands-on role combines expertise in operating system internals, hardware security, and AI safety to build secure, privacy-preserving platforms that protect users, devices, and sensitive data. Work cross-functionally with hardware architects, firmware engineers, and product teams to establish foundational platform defenses and guardrails for AI applications.
Responsibilities
- Define Operating System Security Architecture: Architect the security foundation for OpenAI's next-generation operating system, including trust boundaries, privilege models, and protection mechanisms for sensitive user data. Work to translate hardware capabilities and real-world product constraints into enforceable security policies that defend against emerging threats.
- Integrate Hardware-Backed Security: Partner with hardware security architects to integrate roots of trust, secure elements, trusted execution environments (TEEs), and processor security capabilities into the operating system. Design the software-hardware interface to maximize security posture while maintaining performance.
- Design Foundational Platform Defenses: Establish core security mechanisms including secure boot, code signing, device attestation, secure update mechanisms, cryptographic key protection, and device recovery procedures. Ensure these defenses work cohesively to prevent tampering and unauthorized access.
- Establish Isolation and Access Controls: Design comprehensive isolation and access control policies across kernel, applications, system services, and AI workloads. Implement privilege separation, memory protection, process isolation, and enforced access boundaries to contain potential security breaches.
- Define AI Agent Safety Guardrails: Establish architectural guardrails for how AI applications and agents access information, utilize device sensors and tools, manage sensitive context retention, and act on a user's behalf. Ensure AI systems operate within defined security and privacy boundaries.
- Lead Threat Modeling and Architecture Reviews: Conduct comprehensive threat modeling exercises and security architecture reviews across the platform. Translate emerging threats and attack vectors into practical, enforceable architectural requirements and security improvements.
- Prototype and Guide Implementation: Build proof-of-concept security solutions, review security-critical systems code, and guide engineering teams through complex technical and product security tradeoffs. Mentor engineers on secure coding practices and security architecture principles.
Qualifications
What we look for.
Technical
Operating System and Kernel Architecture
Deep expertise designing or securing operating systems, kernels, embedded platforms, or hypervisors. Strong understanding of OS internals including memory protection mechanisms, process isolation models, executable loading procedures, device driver architecture, and privilege boundary enforcement.
Hardware Security Integration
Proven experience building comprehensive security architectures spanning hardware, firmware, operating systems, applications, and cloud services. Ability to design systems that leverage hardware security features while maintaining software flexibility.
Systems Programming
Ability to write and review security-critical systems code in C, C++, Rust, or comparable low-level languages. Deep understanding of secure development practices, exploit mitigation techniques, memory safety, and common vulnerability patterns in systems software.
Security Architecture Fundamentals
Expertise in secure boot, code signing, device identity and provisioning, attestation mechanisms, trusted execution environments, and hardware-backed cryptographic key protection. Understanding of how these technologies work together to establish trust.
Threat Modeling and Security Analysis
Ability to build rigorous threat models, assess security implications of architectural decisions, and communicate security tradeoffs clearly to technical and non-technical stakeholders. Experience influencing cross-functional engineering teams on security matters.
Education
Computer Science or Related Field
Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or related discipline. Advanced degree preferred but not required given extensive relevant industry experience.
Experience
Operating System Security Experience
Minimum 8-10 years of professional experience in designing, implementing, or securing operating systems, kernels, hypervisors, or privileged systems software at scale.
Consumer Device Security
Shipping security technologies for consumer-facing operating systems, mobile platforms (iOS, Android), or connected consumer devices. Experience bringing security architectures from concept through production deployment.
Hardware-Software Integration
Demonstrated success integrating hardware security capabilities with software systems, including work with secure enclaves, TEEs, secure processors, and trust anchors.
Cross-Functional Collaboration
Proven ability to work effectively across hardware, firmware, software, privacy, and product teams. Experience translating security requirements into practical implementations with real-world constraints.
Skills
Required
Operating System Internals
Memory protection, virtual memory management, process isolation, executable loading, privilege levels, context switching, and inter-process communication mechanisms.
Systems Programming Languages
C, C++, or Rust proficiency for writing and reviewing security-critical kernel and firmware code with deep understanding of low-level system interactions.
Security Architecture Design
Designing end-to-end security architectures, defining trust models, establishing privilege boundaries, and creating defense-in-depth strategies across multiple system layers.
Threat Modeling
Building comprehensive threat models, identifying attack surfaces, assessing vulnerabilities, and translating threats into architectural requirements and mitigations.
Secure Development Practices
Understanding of common vulnerabilities in systems software, exploit mitigation techniques, secure coding principles, and security code review methodologies.
Preferred
Secure Boot and Code Signing
Nice to haveHands-on experience implementing or architecting secure boot chains, code signing infrastructures, and verification mechanisms for embedded and consumer devices.
Trusted Execution Environments
Nice to haveExperience with TEE design, integration, and threat modeling (ARM TrustZone, Intel SGX, or comparable), including secure context isolation and trusted service invocation.
Kernel Hardening
Nice to haveExpertise in memory-safety mitigations (ASLR, DEP/NX, stack canaries), access control enforcement, exploit mitigations, and hardened kernel configurations.
Virtualization Security
Nice to haveExperience with hypervisor security, virtual machine isolation, virtualization-based security (VBS), and applying virtualization to strengthen security boundaries.
Device Attestation and Integrity
Nice to haveExperience designing device attestation mechanisms, remote attestation protocols, integrity verification, and device lifecycle security management.
AI Agent Security
Nice to haveEmerging experience in security architectures for AI systems, sensitive-context isolation, permissioned tool and API access control, prompt-injection resistance, and agent sandboxing.
Cryptography and Key Management
Nice to haveStrong understanding of cryptographic principles, key derivation, secure key storage, hardware key protection, and certificate-based identity management.
Mobile or Embedded Security
Nice to haveProduction experience with iOS, Android, embedded Linux, or other consumer-facing embedded OS security implementations and compliance requirements.
Tech stack
Languages
Frameworks
Tools
Other
Compensation
Pay and benefits.
Base·USD 268,000 – 342,000
Equity·Stock options
Benefits
Cutting-Edge AI and Hardware Integration
Opportunity to work on groundbreaking consumer devices that combine advanced AI with next-generation hardware at scale, shaping how billions of users interact with AI.
Cross-Functional Technical Leadership
Lead security architecture decisions across hardware, firmware, software, and AI teams. Influence product direction and technical strategy on matters of critical importance.
Impact on User Privacy and Safety
Design security and privacy guardrails that directly protect users' personal agency, data, and trust. Build systems where security is a core feature, not an afterthought.
World-Class Technical Team
Collaborate with exceptional researchers, systems engineers, hardware architects, and product leaders. Learn from and contribute to a team solving zero-to-one problems.
Responsible AI Development
Contribute to OpenAI's mission of ensuring artificial general intelligence benefits all of humanity through security-first architecture and thoughtful AI agent governance.
Competitive Compensation Package
Comprehensive salary, equity compensation, and benefits aligned with Silicon Valley standards for senior technical leadership roles at a high-impact AI company.
Process
Interview steps.
- 01
Initial Screening
Recruiter phone screen to assess background, operating system and security architecture experience, and alignment with OpenAI's mission. Discussion of career trajectory and interest in consumer devices and AI safety.
- 02
Technical Architecture Discussion
Technical interview with engineering leader or security architect to deep-dive into operating system internals, hardware-software security integration, and previous security architecture work. Expect discussion of threat modeling, privilege models, and real-world security tradeoffs.
- 03
Security Architecture Deep Dive
Interview with the hiring manager or lead architect focusing on designing security architectures end-to-end. May involve whiteboarding or discussing how to secure various attack surfaces, integrate TEEs, or establish trust models for consumer devices.
- 04
Cross-Functional Collaboration
Conversation with hardware security architect, firmware engineer, or privacy team member to assess ability to collaborate across disciplines, communicate security concepts, and navigate technical tradeoffs with non-security teams.
- 05
Systems Code Review Exercise
Technical exercise reviewing security-critical systems code (typically C/C++/Rust snippets) for vulnerabilities, architectural issues, and secure development practices. Assesses code review skills and security vulnerability knowledge.
- 06
Leadership and Culture Fit
Final conversation with senior leadership or team members assessing values alignment, ability to drive decisions with ambiguity, mentorship potential, and commitment to responsible AI development.
Full posting
Original listing.
About the Team
OpenAI Consumer Devices is building the next generation of products that bring powerful AI into people’s everyday lives. Guided by OpenAI’s mission to ensure AGI benefits all of humanity, our team combines world-class researchers, engineers, designers, and operators who care deeply about creating useful, intuitive, and responsible technology. You’ll have the opportunity to work alongside exceptional people on ambitious, zero-to-one challenges at the intersection of hardware, software, and AI. This is a chance to help define an entirely new category of products—and shape how people experience AI in the future.
The Operating Systems team is critical in this mission, turning sophisticated hardware and AI capabilities into a reliable, trusted platform. Security is central to that work: we define trust boundaries, integrate hardware-backed protections, isolate sensitive context, and establish the guardrails that let AI applications and agents act safely, privately, and under user control.
About the Role
We’re looking for a Software Security Architect to define the security architecture for OpenAI’s next-generation operating system. You’ll work alongside hardware security architects and partner with operating system, silicon, firmware, privacy, and product teams to protect users, their devices, and their data.
This is a senior, hands-on role for someone who can connect operating system internals, hardware-backed security, and real-world product constraints. Your work will shape the platform’s trust model, protect sensitive information, and set the technical foundations for AI that is safe, private, and under user control.
In this role, you will:
Define the operating system’s security architecture, trust boundaries, privilege model, and protections for sensitive user data.
Partner with hardware security architects to integrate roots of trust, secure elements, trusted execution environments, and processor security capabilities into the operating system.
Design foundational platform defenses, including secure boot, code signing, attestation, secure updates, key protection, and device recovery.
Establish isolation and access controls across the kernel, applications, system services, and AI workloads.
Define guardrails for how AI applications and agents access information, use sensors and tools, retain context, and act on a user’s behalf.
Lead threat modeling and architecture reviews across the platform, translating emerging threats into practical, enforceable requirements.
Prototype solutions, review security-critical systems code, and guide engineering teams through complex technical and product tradeoffs.
Minimum Qualifications:
Deep experience designing or securing operating systems, kernels, embedded platforms, hypervisors, or other privileged systems software.
Complex understanding of operating system internals, including memory protection, process isolation, executable loading, device drivers, and privilege boundaries.
Experience building security architectures that span hardware, firmware, operating systems, applications, and cloud services.
You might thrive in this role if you:
Bring practical expertise in secure boot, code signing, device identity, attestation, trusted execution, and hardware-backed key protection.
Can write or review systems code in C, C++, Rust, or comparable languages, with a strong grasp of secure development and exploit mitigation.
Build rigorous threat models, influence cross-functional engineering teams, and communicate security tradeoffs clearly.
Care deeply about user privacy, personal agency, and building systems that earn trust through their design.
Helpful experience:
Shipping security technologies for consumer operating systems, mobile platforms, or connected devices.
Kernel hardening, memory-safety mitigations, virtualization-based security, or secure enclave integration.
Security architecture for AI agents, sensitive-context isolation, permissioned tool use, or prompt-injection resistance.
Device provisioning, manufacturing security, secure recovery, or lifecycle security for hardware products.
About OpenAI
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement.
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form. No response will be provided to inquiries unrelated to job posting compliance.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link.
OpenAI Global Applicant Privacy Policy
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
Redirects to OpenAI's application page.
Other roles
More at OpenAI.
Software Engineer, Astral
Senior
Software Engineer, Infrastructure
Senior
Software Engineer, API Safety
Senior
Android Systems Engineer, Consumer Devices
Senior
Data Engineer, Monetization Data Platform
Senior