About the role

Security Engineer building automated security primitives for NVIDIA DGX Cloud’s AI supercomputing infrastructure. Securing GPU clusters, tenant boundaries, cloud platforms, and on-premise systems.

Responsibilities

Design, build, and integrate production-grade security services for the DGX Cloud security stack
Develop Infrastructure as Code and Policy as Code for automated security enforcement and compliance
Architect and implement the security control plane, automated guardrails, controllers, and runtime security policies
Design and operate scalable security-as-a-service platforms, including identity services, automated secrets management, and real-time scanning APIs
Develop internal security frameworks and automated response systems across the full SDLC, including testing, deployment, and maintenance
Conduct threat modeling for complex distributed systems and the DGX Cloud stack
Identify architectural security gaps and engineer solutions to address them
Partner with DGX Cloud platform teams, NVIDIA security teams, and product engineering
Build paved paths embedding security into CI/CD pipelines and the hardware lifecycle

Experience (typically 8+ years) in SRE, Software Engineering, and Infrastructure Security
Strong software engineering background; ability to write clean, maintainable, well-tested production code
Understanding of cloud-native architecture, container orchestration (Kubernetes), and security challenges in high-throughput, low-latency environments
Ability to transform complex security requirements into consumable internal services and API-first platforms
Proven track record integrating security products such as AuthN/AuthZ, Vaulting, Scanning, and IDS via APIs and custom glue-code
Strong hands-on experience with Linux systems security, including kernel-level primitives such as eBPF, AppArmor, or SELinux
Bachelor’s degree in Computer Science, Engineering, or a related technical field (or equivalent experience)
HPC/AI security experience, RDMA-based networks, or GPU-specific security challenges (standout)
Expertise in workload identity frameworks such as SPIFFE/SPIRE and hardware-root-of-trust integration with TPM/HSM (standout)
Notable contributions to security-focused open-source projects or engineering-focused security research (standout)