Staff Security Engineer - PAM and Agentic Identity

NVIDIA Gruppe; Santa Clara (CA); On-site; USD 168,000 - 270,000; Full time

Job summary

NVIDIA seeks a skilled engineer to upgrade, automate, tailor, and expand PAM and NHI capabilities to fit the agentic era. The role focuses on improving platform value, simplifying user experience, and expanding secure access for infrastructure, automation, and service identities.

You will work with Enterprise Security, Product Security, SRE, and developer teams to reduce standing privilege, boost auditability, and enable self-servicing at scale.

Qualifications

• Bachelor’s or Master’s degree in computer science or equivalent experience.
• 8+ years of experience in security, infra/platform engineering, SRE, IAM or related roles; 4+ years PAM/NHI.
• Balance of infrastructure and software development; ability to operate complex production services.

Responsibilities

• Modernize PAM, secure infrastructure access, and NHI services for the agentic era.
• Automate and extend platforms via APIs, connectors, policy-as-code, onboarding templates, reporting, and service catalog integrations.
• Integrate PAM and NHI into AI/LLM-enabled apps, agent frameworks, and internal developer platforms.

Skills

Security engineering

IAM

SRE

Infrastructure engineering

PAM

NHI

Education

Bachelor’s or Master’s in computer science or equivalent experience

Tools

CyberArk

Idira

Teleport

Azure PIM

HashiCorp Vault

Job description

NVIDIA seeks a skilled engineer to upgrade, automate, tailor, and expand our Privileged Access Management (PAM) and Non-Human Identity (NHI) capabilities to fit agentic era expectations. This position will focus on improving the value of current platforms. It will also simplify the user and operator experience and expand secure access controls for infrastructure, automation, service identities, and agentic workflows. As AI agents, coding agents, internal developer platforms, and autonomous workflows become more common across NVIDIA, this role will help ensure privileged access and infrastructure access services can scale with stronger identity, authorization, observability, and auditability.

You will engage with Enterprise Security, Product Security, infrastructure and platform SRE, developer efficiency, and business teams to reduce standing privilege, boost auditability, simplify adoption, and facilitate self-servicing at scale. This role calls for balanced hands-on experience in both infrastructure engineering and software engineering, robust system/platform engineering expertise, an SRE viewpoint, and the aptitude to build reliable automation, integrations, APIs, and internal tooling within hybrid technology environments, including AI/LLM-enabled applications and agentic workflows.

What you will be doing:

• Modernize PAM, secure infrastructure access, and NHI services for NVIDIA’s agentic era, covering privileged users, service accounts, AI/coding/service agents, and autonomous workflows.
• Automate and extend existing platforms through APIs, custom connectors, policy-as-code, onboarding templates, reporting, and service catalog integrations to improve self-service adoption and reduce toil.
• Integrate PAM, NHI, and secure access controls into AI/LLM-enabled applications, agent frameworks, internal developer platforms, and autonomous workflows.
• Expand our services coverage across Linux/Windows, cloud and on-prem systems, container orchestration platforms, data storage solutions, network devices, developer platforms, IaC, CI/CD, and internal tools.
• Mature core controls including JIT access, zero standing privilege, session recording, break-glass access, credential rotation, access reviews, and audit evidence.
• Own service reliability with SRE rigor, including monitoring, alerting, incident response, operational readiness, continuous improvement, and practical technology evaluation.

What we need to see:

• Bachelor’s degree or Master’s degree in computer science or equivalent experience
• 8+ years of experience in security, infrastructure/platform engineering, SRE, IAM, or related enterprise technology roles, including 4+ years directly related to PAM and NHI solutions.
• Balanced infrastructure and software development skills, with the ability to operate complex production services and build automated processes, system connections, application interfaces, connectors, and operational tooling.
• Practical experience working within Linux and Windows environments, on-prem and cloud infrastructure, Kubernetes, databases, CI/CD systems, and production operations.
• Experience with PAM, or secrets platforms such as Idira/CyberArk, Teleport, Azure PIM, HashiCorp Vault, or similar technologies.
• Strong SRE mentality, operational rigor, and collaboration skills across global engineering, IT, security, and platform teams.

Ways to stand out from the crowd:

• Hands-on ability to maintain access platforms, build custom connectors, integrate unsupported targets, and automate onboarding, credential, and session workflows.
• Familiarity with modern access patterns such as short-lived credentials, identity-aware proxies, session recording, access requests, device trust, and workload identity.

NVIDIA is widely considered to be one of the technology world’s most desirable employers. We have some of the most intelligent and hardworking people in the world working for us. If you're creative and autonomous, we want to hear from you!

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 168,000 USD - 270,250 USD.

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until September 14, 2026.

This posting is for an existing vacancy.

NVIDIA uses AI tools in its recruiting processes.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.