Data Center Security Firmware Engineer (Root of Trust)

NVIDIA Corporation; California; On-site; USD 184,000 - 288,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA Corporation is seeking a highly motivated senior security firmware engineer to join the Data Center Systems Software team and secure the platform from reset through attestation, update, and recovery in production.

You will derive security requirements, design root of trust firmware with secure boot and attestation, and lead cross-functional efforts across silicon, platform, and security teams, with an emphasis on modern AI-enabled tooling and processes.

Qualifications

• BS or MS in Computer Science, Computer Engineering, Electrical Engineering, or equivalent experience.
• 7+ years of software and firmware engineering experience, or equivalent depth, including products built on a hardware root of trust.
• Deep understanding of roof of trust security fundamentals: chains of trust, signing and key management, attestation, and anti-rollback.
• Strong low-level programming skills and a deep understanding of SoC access controls (TrustZone, privilege levels, memory and bus protection).
• Experience with Python or a comparable language for automation.

Responsibilities

• Derive security requirements for NVIDIA’s data center platforms from business needs and threat modeling.
• Design and deliver root of trust firmware with features like secure and measured boot, attestation, provisioning of identities and cryptographic material, and secure debug.
• Own features from architecture to code, coordinating across silicon, platform, security architecture, manufacturing, and partner teams.
• Implement industry security standards (eg.: SPDM, TCG DICE).
• Lead design and code reviews, improve threat modeling, testing, CI, and release practices, and integrate AI agents.

Skills

Low-level programming

SoC access controls

TrustZone

Python

Root of trust firmware

Education

BS or MS in Computer Science/Computer Engineering/Electrical Engineering or equivalent experience

Tools

C/C++

Rust

OP-TEE

Keystone

OpenBMC

Job description

NVIDIA Corporation is seeking a highly motivated senior security firmware engineer to join the Data Center Systems Software team and secure the platform from reset through attestation, update, and recovery in production.

You will derive security requirements, design root of trust firmware with secure boot and attestation, and lead cross-functional efforts across silicon, platform, and security teams, with an emphasis on modern AI-enabled tooling and processes.