Senior Infrastructure Security Engineer - EDA Clusters

NVIDIA Corporation; Sacramento (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Job summary

NVIDIA Corporation seeks an experienced Infrastructure Security Engineer for EDA Clusters. You will design and operate security controls across compute, storage, and networking for NVIDIA hardware labs, spanning on-prem data centers and multi-cloud environments.

You will implement telemetry, threat models, and automated protections, owning end-to-end security lifecycles and collaborating with data center ops, CSP teams, and central security.

Qualifications

• Strong Linux depth and system-level comfort.
• Hands-on experience securing compute fleets at scale.
• Working networking expertise in large compute environments.
• Proficiency in automation with Python, Go, or shell.
• Solid foundations in access control, authentication, segmentation, encryption, and vulnerability lifecycle.

Responsibilities

• Build and operate security controls and telemetry for EDA compute, storage, and networking.
• Collect and normalize security signals into SIEM and build detections/dashboards.
• Apply infrastructure- and policy-as-code to ensure secure configuration by default.
• Manage lifecycle: selection, rollout, operation, and replacement of security technologies you own.
• Collaborate with data center operations, IT storage/networking, CSP teams, and NVIDIA central security on shared outcomes.
• Perform threat modeling and mitigation planning across network, storage, and compute.

Skills

Linux depth

Infrastructure security

Networking security

Programming/scripting (Python, Go, or/

Access control and encryption

Threat modeling & mitigation

Kernel/fabric observability (eBPF)

Education

Bachelor's degree in engineering or equivalent experience

Tools

eBPF

Job description

Securing NVIDIA's EDA clusters is not a matter of deploying a standard security stack. The workloads are too large, too long-running, and too performance-sensitive for an off-the-shelf playbook to simply apply. You'll be an individual contributor on Infrastructure Security Engineering for EDA Clusters, the team that implements security controls across the compute, storage, and networking that NVIDIA's hardware engineers design silicon on - spanning on-prem data centers and multi-cloud. This is hands-on build work, not control review. If your depth is in large-scale compute, networking, or storage infrastructure at a hyperscaler, a security product company, or anywhere fleets and fabrics are the day job, and you've carried real accountability for the security properties of those systems, you're who we want to talk to. Build and operate security controls and telemetry for EDA compute, storage, and networking - design, ship to production, then own them.Make the network and platform the control plane. Collect and normalize security signals from the fleet into our SIEM, and build the detections and dashboards that turn it into something actionable. Log collection alone is not monitoring.Infrastructure-as-code and policy-as-code so secure configuration is the default state, with compliance evidence produced as an engineering output rather than a manual exercise.Run the lifecycle of the security technologies you own: selection, rollout, operation, and eventual replacement.Partner directly with data center operations, IT storage and networking, network engineering, CSP teams, and NVIDIA's central security organization on shared outcomes.Threat modeling and mitigation planning across network, storage, and compute.

8+ years of hands-on infrastructure or infrastructure-security engineering across on-prem and cloud environments.

• Strong Linux depth - you are comfortable at the system level, not just the console level.
• Real experience operating or securing compute fleets at scale: provisioning, lifecycle, and the operational realities of long-running jobs.
• Working networking expertise applied to large compute environments.
• Programming/scripting fluency (Python, Go, or shell) used for automation, detection, and tooling you've shipped and maintained.
• Solid foundations in access control, authentication, segmentation, encryption, and vulnerability lifecycle.
• A Bachelor's degree in a relevant engineering field or equivalent experience.

Security or platform engineering inside EDA, HPC, or large research-cluster environments.

• Breadth across security domains - IAM, EDR/XDR, CNAPP, CSPM, zero-trust architectures - or a demonstrated pattern of picking up new domains fast.
• Built or operated infrastructure security capabilities at a hyperscaler or a security product company - you engineered detection and enforcement systems rather than deploying someone else's.
• Experience with kernel- and fabric-level observability and enforcement - eBPF, in-line and out-of-band inspection, DPU/SmartNIC offload - as an alternative to heavyweight in-node agents.

• You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until October 24, 2026.

NVIDIA uses AI tools in its recruiting processes.As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.