Senior Security Firmware Engineer - Data Center Trust

Thomas To; Santa Clara (CA); On-site; USD 184,000 - 288,000; Full time

Job summary

NVIDIA is seeking a senior security firmware engineer to join the Data Center Systems Software team and secure the platform from reset through attestation, update, and recovery.

You will design and deliver root-of-trust firmware with secure boot, attestation, and key management, and lead cross‑functional reviews that span silicon, platform, and security teams. Experience with Python and cryptography is valued.

Qualifications

• BS or MS in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent experience.
• 7+ years of software and firmware engineering experience, or equivalent depth, including products built on a hardware root of trust.
• Deep understanding of roof of trust security fundamentals: chains of trust, signing and key management, attestation, and anti-rollback.
• Strong low-level programming skills and a deep understanding of SoC access controls (privilege levels, TrustZone, memory and bus protection).
• Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language.
• A record of leading technical work across teams without formal authority, including guiding other engineers on a shared deliverable.
• Experience with modern AI and agents, including an AI-forward mindset and proactive adoption of new tools and techniques.
• Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a distributed team.
• Comfortable with ambiguity and complexity; you make sound decisions quickly with incomplete information and course-correct without friction.

Responsibilities

• Derive security requirements for NVIDIA’s data center platforms from business needs and threat modeling.
• Design and deliver root of trust firmware with features like secure and measured boot, attestation, provisioning of identities and cryptographic material, and secure debug.
• Own features from architecture to code: make the trade-offs explicit, gain agreement across silicon, platform, security architecture, manufacturing, and partner teams, and deliver the implementation.
• Implement industry security standards (eg.: SPDM, TCG DICE).
• Lead design and code reviews, improve threat modeling, testing, CI, and release practices, and make AI agents a normal part of how the team builds firmware.

Skills

Firmware experience

Root-of-trust security

Low-level programming

SoC security

Python scripting

Technical leadership

AI tools mindset

Communication skills

Adaptability

Education

BS or MS in CS/CE/EE or related field

Tools

OP-TEE

Keystone

Rust

OpenBMC

Job description

NVIDIA is seeking a senior security firmware engineer to join the Data Center Systems Software team and secure the platform from reset through attestation, update, and recovery.

You will design and deliver root-of-trust firmware with secure boot, attestation, and key management, and lead cross‑functional reviews that span silicon, platform, and security teams. Experience with Python and cryptography is valued.