Senior Platform Security Engineer - Device Trust, Attestation and Secure Browser

Nvidia Corporation in; Santa Clara (CA); On-site; USD 196,000 - 311,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA, Santa Clara, CA, seeks a senior security engineer to design and operate a device attestation service using TPM 2.0, Secure Enclave and measured boot to produce verifiable posture signals for access decisions.

You will scale platform-security across large endpoint estates while maintaining reliability and performance; partner with security, IT and product teams on architecture and long‑term ownership.

Qualifications

• Bachelor's or Master's in Computer Science or a related field.
• 12+ years of experience in platform, infrastructure, or security engineering.
• Strong software development skills with a track record of shipping and operating production services.
• Experience designing, building, and owning large-scale distributed services or security platforms.
• Demonstrated experience automating operations at scale: reducing toil and building self-healing or closed-loop remediation.
• Solid understanding of Zero Trust architecture, device trust and posture models, and endpoint attack techniques.
• Working knowledge of hardware or platform trust primitives (TPM, Secure Enclave, measured boot, TEEs, hardware-bound credentials).
• Excellent written and verbal communication skills for architecture decisions.

Responsibilities

• Design and implement a device attestation service that produces verifiable, cryptographically backed device posture signals from hardware roots of trust.
• Scale platform-security capabilities across large and heterogeneous endpoint environments while maintaining reliability, performance, security, compliance, and a positive user experience.
• Partner with multi-functional collaborators across security, IT and product teams to align on architecture, build strategy, and long-term operational ownership.

Skills

Zero Trust

Device trust

Security engineering

Distributed services

Automation at scale

Executive communication

Education

Bachelor's / Master's in CS or related

Tools

TPM

Secure Enclave

Measured boot

Job description

What You'll Be Doing:

• Design and implement a device attestation service that produces verifiable, cryptographically backed device posture signals from hardware roots of trust (TPM 2.0, Secure Enclave, measured boot) and makes them consumable as a first-class input to access decisions.
• Scale platform-security capabilities across large and heterogeneous endpoint environments while maintaining reliability, performance, security, compliance, and a positive user experience.
• Partner with multi-functional collaborators across security, IT and product teams to align on architecture, build strategy, and long-term operational ownership.

What We Need to See:

• Bachelor's degree or Master's degree or equivalent experience in Computer Science or a related field.
• 12+ years of experience in platform, infrastructure, or security engineering, including significant depth in endpoint or platform security.
• Strong, current software development skills with a track record of shipping and operating production services.
• Experience designing, building, and owning large-scale distributed services or security platforms, including the operational responsibility that comes with them.
• Demonstrated experience automating operations at scale: reducing toil, building self-healing or closed-loop remediation, and running services against defined SLOs.
• Solid understanding of Zero Trust architecture, device trust and posture models, and endpoint attack techniques, plus how identity, device, and network signals combine into access decisions.
• Working knowledge of at least one hardware or platform trust primitive (TPM, Secure Enclave, measured boot, TEEs, hardware-bound credentials) and the ability to go deep quickly on attestation.
• Excellent written and verbal communication skills; comfortable driving architecture decisions across senior and executive audiences.

Ways To Stand Out From The Crowd:

• Hands-on experience building attestation or device posture services that run at enterprise scale with high availability and low latency.
• Deep understanding of TPM and measured boot internals, remote attestation protocols, and device-bound credentials and tokens (DPoP, mTLS, WebAuthn). Familiarity with securing non-human and machine identities, and with how attestation underpins service-to-service and agentic access patterns.
• Experience building AI agents or ML-assisted automation for reliability or security operations, including guardrails, evaluation, and safe-action design or a demonstrated track record of picking up emerging tooling and shipping with it fast.
• Experience leading enterprise endpoint or device trust transformations, including migration off legacy agents and posture models at scale.

At NVIDIA, we operate at the core of enterprise security, architecting and protecting the platforms that support some of the most advanced computing systems in the world. This role offers the opportunity to influence strategy, build the automation that runs our security platforms, engage with executives, and leave a lasting security impact, working alongside outstanding engineers and security leaders!

NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most intelligent and hardworking people in the world working for us. If you're creative and autonomous, we want to hear from you!

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 196,000 USD - 310,500 USD.

You will also be eligible for equity and benefits .

Applications for this job will be accepted at least until September 14, 2026.

This posting is for an existing vacancy.

NVIDIA uses AI tools in its recruiting processes.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.