Senior Infrastructure Security Engineer – EDA Clusters

NVIDIA Corporation; Washington; On-site; USD 184,000 - 357,000; Full time

Benefits offered by this job

Equity

Benefits package

Job summary

NVIDIA is seeking an experienced Infrastructure Security Engineer for EDA Clusters to design and operate security controls across compute, storage, and networking in on‑prem data centers and multi‑cloud environments.

This hands‑on role builds scalable tooling, instrumentation for detections, and secure‑by‑default configurations using infrastructure‑as‑code and policy‑as‑code while ensuring uninterrupted long‑running jobs.

Qualifications

• 8+ years of hands‑on infrastructure or infrastructure‑security engineering across on‑prem and cloud environments.
• Strong Linux depth—system level proficiency rather than only the console.
• Experience operating or securing compute fleets at scale with long‑running jobs.
• Working networking expertise applied to large compute environments.
• Programming/scripting fluency (Python, Go, or shell) used for automation and tooling.
• Foundations in access control, authentication, segmentation, encryption, and vulnerability lifecycle.
• Track record of landing changes with partners who don't report to you.
• Clear written and verbal communication with engineers and leadership.
• Bachelor's degree in a relevant engineering field or equivalent experience.

Responsibilities

• Build and operate security controls and telemetry for EDA compute, storage, and networking; design, ship to production, and own them.
• Engineer around hard constraints to protect long‑running compute jobs without degradation.
• Make the network and platform the control plane; do not rely solely on node‑side measures.
• Instrument for detection by collecting and normalizing signals into SIEM and building actionable detections and dashboards.
• Investigate and respond to EDA‑specific threats with infrastructure and service owners.
• Automate enforcement and evidence; implement IaC and policy‑code with secure configurations as default.
• Manage the lifecycle of security technologies: selection, rollout, operation, replacement.
• Collaborate across data centers, IT, networking, CSP teams, and central security for shared outcomes.
• Think like an adversary with threat modeling and mitigation across network, storage, and compute.

Skills

Linux depth

Python

Go

Shell scripting

Automation

Education

Bachelor's degree in engineering

Tools

eBPF

Job description

Securing NVIDIA's EDA clusters is not a matter of deploying a standard security stack. The workloads are too large, too long-running, and too performance-sensitive for an off-the-shelf playbook to simply apply. That constraint is the job. You'll be an individual contributor on Infrastructure Security Engineering for EDA Clusters, the team that implements security controls across the compute, storage, and networking that NVIDIA's hardware engineers design silicon on - spanning on-prem data centers and multi-cloud. You will sit alongside the engineers who run these clusters 24x7, close enough to deploy a control, investigate a behavior, and change the running environment yourself.

This is hands-on build work, not control review. You'll decide where conventional tooling applies, where it actively cannot, and then engineer the alternative. If your depth is in large-scale compute, networking, or storage infrastructure at a hyperscaler, a security product company, or anywhere fleets and fabrics are the day job, and you've carried real accountability for the security properties of those systems, you're who we want to talk to. We don't expect fluency in every security product category. We expect you to own outcomes and pick up the remaining domain breadth fast. Security engineering here is engineering: code, instrumentation, and secure-by-default infrastructure - not tickets, exceptions, and spreadsheets.

What You'll Be Doing

• Build and operate security controls and telemetry for EDA compute, storage, and networking - design, ship to production, then own them.
• Engineer around hard constraints. Protect multi-day, high-value compute jobs without degrading them. Where heavyweight in-node agents are not viable, build the workable answer instead.
• Make the network and platform the control plane. Protection can't depend solely on what runs inside the node.
• Instrument for detection. Collect and normalize security signals from the fleet into our SIEM, and build the detections and dashboards that turn it into something actionable. Log collection alone is not monitoring.
• Investigate and respond. Chase down EDA-specific threats and exposure, and execute containment and remediation hands‑on with infrastructure and service owners.
• Automate enforcement and evidence. Infrastructure-as-code and policy-as-code so secure configuration is the default state, with compliance evidence produced as an engineering output rather than a manual exercise.
• Run the lifecycle of the security technologies you own: selection, rollout, operation, and eventual replacement.
• Work across boundaries. Partner directly with data center operations, IT storage and networking, network engineering, CSP teams, and NVIDIA's central security organization on shared outcomes.
• Think like an adversary. Threat modeling and mitigation planning across network, storage, and compute.

What We Need To See

• 8+ years of hands‑on infrastructure or infrastructure‑security engineering across on‑prem and cloud environments.
• Strong Linux depth - you are comfortable at the system level, not just the console level.
• Real experience operating or securing compute fleets at scale: provisioning, lifecycle, and the operational realities of long-running jobs.
• Working networking expertise applied to large compute environments.
• Programming/scripting fluency (Python, Go, or shell) used for automation, detection, and tooling you've shipped and maintained.
• Solid foundations in access control, authentication, segmentation, encryption, and vulnerability lifecycle.
• A track record of landing changes with partners who don't report to you.
• Clear written and verbal communication - credible with individual engineers and with leadership.
• A Bachelor's degree in a relevant engineering field or equivalent experience.

Ways To Stand Out From The Crowd

• Security or platform engineering inside EDA, HPC, or large research‑cluster environments.
• Breadth across security domains - IAM, EDR/XDR, CNAPP, CSPM, zero‑trust architectures - or a demonstrated pattern of picking up new domains fast.
• Built or operated infrastructure security capabilities at a hyperscaler or a security product company - you engineered detection and enforcement systems rather than deploying someone else's.
• Experience with kernel‑and fabric‑level observability and enforcement - eBPF, in-line and out-of-band inspection, DPU/SmartNIC offload - as an alternative to heavyweight in-node agents.
• Contributions to open-source security or infrastructure tooling.

Widely considered to be one of the technology worlds most desirable employers, NVIDIA offers highly competitive salaries and a comprehensive benefits package. We have some of the most forward‑thinking and talented people in the world working for us and, due to outstanding growth, our world‑class engineering teams are growing fast. If you're a creative and autonomous engineer with real passion for technology, we want to hear from you.

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 184,000 USD - 287,500 USD for Level 4, and 224,000 USD - 356,500 USD for Level 5.

You will also be eligible for equity and benefits.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.