Senior Software Engineer, Agent Policy Fabric

NVIDIA Corporation; California; On-site; USD 160,000 - 280,000; Full time

Job summary

NVIDIA Corporation is seeking a Senior Software Engineer to advance Agent Policy Fabric (APF) from PoC to production-ready software. You will implement policy-verification features, runtime integrations, and conformance tests across enterprise systems while ensuring reliable failure handling and auditability.

You will own a defined subsystem, drive design discussions, and collaborate with platform, security, and product partners to deliver robust, secure, and observable components at scale.

Qualifications

• Bachelor's degree or equivalent experience with 5+ years in systems software or related fields.
• Proficient in Rust, Go, C++, or Python with production-grade code.
• Experience delivering services or systems components with API design.
• Experience with security controls such as authorization checks or credential handling.
• Linux familiarity, service-to-service interfaces, automated testing, CI/CD.
• Ability to own engineering work from design to delivery and communicate tradeoffs.

Responsibilities

• Build policy-verification features including policy validation, freshness checks, and binding decisions to subject and runtime context.
• Translate canonical policy into runtime rules and handle unsupported policies safely.
• Develop runtime integrations with OpenShell and other runtimes; test interfaces and document behavior.
• Create fixtures and tests (property, fuzz) to exercise policy behavior and failure paths.
• Deliver production-ready components with observability and performance measurements.
• Contribute design docs and participate in reviews with security and platform partners.
• Help the team plan, communicate risks, review code, and share knowledge.

Skills

Rust

Go

C++

Python

Distributed systems

Security engineering

API design

Linux

CI/CD

Education

Bachelor's degree or equivalent experience

Tools

protobuf/gRPC

Sigstore

TUF

in-toto

OPA/Rego

Job description

The Agentic Safety Engineering team is building Agent Policy Fabric (APF), an enterprise governance layer for AI agents. APF combines signed policy, runtime verification, policy projection, credential mediation, and audit records to help govern the actions agents take across enterprise systems. We are looking for a Senior Software Engineer to help turn the APF proof of concept into diligent production software. You will build, implement, test, and operate features in policy verification, runtime integration, or conformance testing. Working with experienced platform and security engineers, you will own a defined feature or subsystem and help ensure that policy decisions are accurate, integrations are reliable, and failures are handled safely!

Join us!

What You'll Be Doing

• Build policy-verification features: Implement components of the Runtime Policy Verifier and authorization APIs, including signed policy validation, freshness and revocation checks, rollback protection, and binding decisions to the correct subject and runtime context, following reviewed security contracts.
• Implement policy projection: Translate canonical APF policy into runtime-specific rules and adapter constraints. Handle unsupported policies and partial updates safely so runtimes admit work only when the required policy has been accepted.
• Develop runtime integrations: Work with OpenShell and other runtime engineers to implement and test agreed interfaces for policy consumption, runtime context, admission decisions, and audit events. Document interface behavior and raise gaps or conflicting assumptions for resolution.
• Strengthen correctness and conformance: Build fixtures, compatibility tests, negative tests, and property or fuzz tests that exercise policy behavior, integration boundaries, and failure paths. Investigate defects and turn findings into regression coverage.
• Deliver production-ready components: Add observability, measure performance, debug reliability issues, and contribute to rollout plans and operational documentation for the components you own.
• Contribute technical judgment: Write focused design documents, explain implementation tradeoffs, participate in code and security reviews, and work with platform, Identity, and Product Security partners to resolve issues within your scope.
• Help the team deliver: Break work into achievable turning points, communicate dependencies and risks, review code, and share knowledge with other engineers.

What We Need To See

• Bachelor's degree or equivalent experience, with 5+ years of relevant industry experience in systems software, backend services, distributed systems, security engineering, or policy infrastructure.
• Strong programming skills in at least one of Rust, Go, C++, or Python, with experience delivering maintainable, tested production code.
• Experience building and delivering services or systems components, including API design, integration, debugging, and error handling.
• Practical experience implementing security controls, such as authorization checks, signature verification, or credential handling, and the ability to reason about trust boundaries and safe failure behavior.
• Working knowledge of Linux, service-to-service interfaces, automated testing, CI, and software release workflows.
• Ability to own engineering work through design, implementation, validation, and delivery; communicate technical tradeoffs clearly; and collaborate effectively through design and code reviews.

Ways To Stand Out From The Crowd

• Experience with policy engines or authorization systems such as OPA/Rego, Cedar, Zanzibar-style systems, or runtime enforcement frameworks.
• Experience with signed artifacts, trust-root distribution, key rotation, revocation, or tools such as Sigstore, TUF, or in-toto.
• Familiarity with AI-agent runtimes, sandboxed execution, tool-call governance, MCP-style routing, or credential isolation.
• Experience with protobuf/gRPC, schema evolution, backward-compatible APIs, or cloud and enterprise deployment environments.
• Use of property testing, fuzzing, or other adversarial testing techniques to find security and correctness defects.

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 152,000 USD - 241,500 USD for Level 3, and 184,000 USD - 287,500 USD for Level 4.

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until October 25, 2026.

This posting is for an existing vacancy.

NVIDIA uses AI tools in its recruiting processes.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

, , JR2028432