The Infrastructure Trust team is seeking a highly independent and visionary Principal Engineer to architect resilient distributed platforms and bridge the gap between physical and logical security. In this role, you will lead technical strategies to ensure the absolute integrity of our systems, transforming Google's core infrastructure. You will help Google leverage untrusted environments to host critical assets including AI models, and also enable Google to host and protect third party’s models and customer data safely and privately. Grounded in deep foundational security principles, you will bring the credibility and executive presence required to navigate complex cross-organizational boundaries, influence key stakeholders, and serve as a technical bridge across Google's broader engineering units. You will creatively address expanding industry challenges, including securing multi-cloud workloads, mitigating AI infrastructure threats, and establishing guardrails for AI agents, while acting as a technical bridge across Google's broader engineering organizations. Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems. Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $307000 - $427000 (USD) + 30% bonus target + equity + benefits Learn more about benefits at Google. Responsibilities • Lead the paradigm shift to securely deploy workloads in untrusted environments. • Define technical isolation and verification frameworks to safely execute untrusted code at scale including guiding creation of technical isolation solutions for jobs running on a single machine, within a data center, or across data centers. • Design defensive architectures responsive to sophisticated threats, specifically addressing the offensive use of AI by both external and internal actors. • Address emerging multi-cloud workload risks, secure AI training/inference infrastructure, and establish safe execution guardrails for autonomous AI agents. • Design defensive architectures responsive to sophisticated threats, specifically addressing the offensive use of AI by both external and internal actors. Minimum qualifications: • Bachelor’s degree in Computer Science or related field or equivalent practical experience. • 15 years of experience as a software engineering leader. • Experience with technical innovation within cross-functional engineering environments. • Experience in data center security, networking security, hardware security, or operating system security. Preferred qualifications: • Master’s degree or PhD in Computer Science or related field. • Proven track record of inter-team/cross-functional leadership, with the ability to influence C-level stakeholders and align technical roadmaps across product groups. • Deep expertise in hardware vulnerabilities and physical data center security. • Demonstrated success in leading initiatives around confidential compute, physical-logical boundaries, and securing third-party/on-premise environments. • Strong awareness of industry trends in AI infrastructure threats and how to apply guardrails for AI agents at an infrastructure level. • Credibility as an engineering leader who can guide and structure a team of technical leads across broad and complex security domains.