Principal Agent Identity Security Engineer

NVIDIA Corporation; Santa Clara (CA); On-site; USD 240,000 - 380,000; Full time

Benefits offered by this job

Equity

Benefits

Paid time off

Job summary

NVIDIA Corporation is seeking a Principal Engineer to define and build core agent identity capabilities that enable trusted AI agents across NVIDIA’s internal ecosystem. This hands-on role requires turning complex problems into practical designs and producing production-ready services through collaboration with security, platform, and application teams.

You will prototype, validate, and iterate on credential brokering, token exchange, delegation, workload identity, and lifecycle management while

Qualifications

• 15+ years in software/security engineering or related fields.
• Hands-on leadership and MVP-driven problem solving.
• Experience with credential brokering and workload identity.
• Strong knowledge of cloud security and device trust.

Responsibilities

• Architect and build agent identity security features across cloud, on‑premises, and hybrid environments.
• Prototype and validate MVPs with partner teams and iterate toward production‑ready services.
• Develop reusable APIs, CLI tools, and integration patterns for enterprise tooling.
• Collaborate with Enterprise Security, Platform, and AI teams to align architecture with real workflow needs.

Skills

Software engineering

Security engineering

Identity and access management

Distributed systems

Team leadership

Education

Bachelor's or Master's degree in Computer Science or related field

Tools

Docker

containerd

AWS

Azure

GCP

OIDC

OAuth 2.0/2.1

SCIM

mTLS

SPIFFE

Job description

NVIDIA Corporation is seeking a Principal Engineer to define and build core agent identity capabilities that enable trusted AI agents across NVIDIA’s internal ecosystem. This hands-on role requires turning complex problems into practical designs and producing production-ready services through collaboration with security, platform, and application teams.

You will prototype, validate, and iterate on credential brokering, token exchange, delegation, workload identity, and lifecycle management while