Senior Security Engineer, Infrastructure Security Engineering - DGX Cloud

NVIDIA Corporation; California (MO); Hybrid; USD 122,000 - 197,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA Corporation is seeking a Security Engineer within the Infrastructure Security Engineering organization for the DGX Cloud platform. You will design and build production-grade security services, automate policy enforcement, and architect the security control plane to protect massive-scale GPU clusters.

You will collaborate across DGX Cloud platform teams and NVIDIA security and product engineering to embed security into CI/CD and hardware lifecycles, building self-service security

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent experience).
• 8+ years in SRE, software engineering, and infrastructure security.
• Strong production-grade coding skills for scalable security services.
• Experience with cloud-native architectures and container orchestration (Kubernetes).
• Familiarity with Linux internals and security primitives (eBPF, AppArmor, SELinux).

Responsibilities

• Design, build, and integrate production-grade security services for DGX Cloud.
• Automate security enforcement via Infrastructure as Code and Policy as Code.
• Architect and implement the security control plane and guardrails for tenant isolation and integrity.
• Develop security services as a scalable platform with self-service capabilities.
• Collaborate with platform, security, and product teams to embed security in CI/CD and hardware lifecycles.

Skills

Infrastructure Security

Distributed Systems

SRE

Production-grade coding

Education

Bachelor's degree in CS/Engineering

Tools

Kubernetes

eBPF

AppArmor

SELinux

Vault

IDS

SPIFFE/SPIRE

Job description

NVIDIA DGX Cloud is the AI supercomputing-as-a-service substrate designed to power the next generation of AI and industrial-scale breakthroughs. As a Security Engineer within our Infrastructure Security Engineering organization, you will not just help \"secure\" our platform—you will architect and build the foundational security primitives that protect massive-scale GPU clusters. You will design automated, resilient security systems that help ensure the integrity of our omni-cloud and on-premise AI infrastructure.What You Will Be Doing:Security Engineering: Design, build, and integrate production-grade security services. You will focus on the engineering of security products—transforming third-party and open-source tools into seamless, API-driven components of the DGX Cloud security stack.Automated Policy Enforcement: Shift security \"left\" by developing Infrastructure as Code and Policy as Code to automate security enforcement and compliance at the speed of cloud-scale deployment.Orchestration Security & Guardrails: Architect and implement the security control plane. You will engineer automated guardrails, controllers, and runtime security policies that validate and enforce the integrity of tenant boundaries.Security-as-a-Service Approach: Designing and operating security services as a scalable platform. Building \"self-service\" security primitives (e.g., Identity-as-a-Service, automated secrets management, and real-time scanning APIs) that allow developer teams to move fast.Security Tooling & Lifecycle: Develop internal security frameworks and automated response systems. Responsible for the full software development lifecycle (SDLC) of the security tools, including testing, deployment, and maintenance.Threat Modeling & System Design: Conduct deep-dive threat models on complex distributed systems and the DGX Cloud stack, identifying architectural gaps in security and engineering the solutions to close them.Multi-Functional Collaboration: Partner with DGX Cloud platform teams, broader NVIDIA security teams, and product engineering to understand their needs and build paved paths that seamlessly embed security into the CI/CD pipeline and the hardware lifecycle.What We Need to See:We are looking for high-caliber engineers with deep spikes of expertise in a few of these areas and the intellectual curiosity to dive into the rest. If your experience aligns with the core of this role—building resilient security systems—and you can show us how, we want to hear from you!Infrastructure Engineering: Experience (typically 8+ years) in SRE, Software Engineering, and Infrastructure Security. You focus on building systemic solutions rather than performing manual operations or \"tool administration.\"Production-Grade Coding: A strong software engineering background with the ability to write clean, maintainable, and well-tested code. You should be comfortable building and maintaining production service at scale.Distributed Systems Expertise: Understanding of cloud-native architecture, container orchestration (Kubernetes), and the security challenges inherent in high-throughput, low-latency environments.Platformizing Security: Transform complex security requirements into consumable internal services. You will focus on the \"Developer Experience\" of security, ensuring that our infrastructure security controls are delivered as robust, API-first platforms that integrate seamlessly with NVIDIA’s internal engineering workflows.Security Product Integration: Proven track record of taking complex security products (AuthN/AuthZ, Vaulting, Scanning, IDS) and integrating them into an automated infrastructure via APIs and custom glue-code.Linux Internals: Strong hands-on experience with Linux systems security, including kernel-level primitives (eBPF, AppArmor, or SELinux).Foundation: Bachelor’s degree in Computer Science, Engineering, or a related technical field (or equivalent experience).Ways To Stand Out from the Crowd:HPC/AI Security: Experience securing high-performance computing environments, RDMA-based networks, or GPU-specific security challenges.Cloud-Native Identity: Expertise in workload identity frameworks (e.g., SPIFFE/SPIRE) and hardware-root-of-trust (TPM/HSM) integration.Open Source Impact: Notable contributions to security-focused open-source projects or a track record of engineering-focused security research. How have you represented and helped advance the industry?Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 170,000 CAD - 220,000 CAD for Level 4, and 225,000 CAD - 275,000 CAD for Level 5.You will also be eligible for equity and benefits.Applications for this job will be accepted at least until September 9, 2026.This posting is for an existing vacancy.NVIDIA uses AI tools in its recruiting processes.