Distinguished Engineer, Security Architecture – DGX Cloud

This is a fully remote position, open to applicants in Washington.

📋 Description

• Establish the security design standards for DGX Cloud encompassing tenancy, GPU workloads, identity, supply chain, and isolation.

• Develop reference architectures, golden paths, and actionable security requirements.

• Collaborate with engineering teams to understand the codebase and assist in delivering secure systems.

• Lead the multi-year architecture strategy for shared security infrastructure, covering hardened baselines, patch service level objectives (SLOs), deploy-time policies, admission control, workload identity, supply chain provenance, signing, attestation, detection, and response.

• Address recurring risks at their architectural source and enhance paved roads, baselines, and detection mechanisms.

• Manage, recruit, and nurture a small team of Principal Engineers.

• Act as DGX Cloud's technical liaison to NVIDIA's central security organization.

• Collaborate with platform, production engineering, and network security teams.

• Identify security gaps and necessary remediation actions for executives responsible for risk management.

• Operate through influence rather than authority, ensuring that releases are not personally obstructed.

⛳️ Requirements

• Generally, over 20 years of experience in software engineering, infrastructure, and security, with substantial expertise in securing extensive distributed or cloud platforms.

• Demonstrated history of owning the security architecture for a large platform comprehensively, covering multi-tenant isolation, identity and access management, policy enforcement, supply chain security, and detection.

• Experience in writing, deploying, and managing production services at scale.

• Proficiency in reading unfamiliar codebases and pinpointing security assumption failures.

• Familiarity with emerging technologies, AI-generated code, AI-assisted security assessments, and agents operating within systems.

• Expertise in threat modeling for complex distributed systems.

• Knowledge of cloud-native architecture, Kubernetes, Linux system security, kernel-level primitives, and high-throughput multi-tenant environments.

• Capability to build consensus and align organizational goals across engineering leadership and senior executives.

• Typically over 7 years of experience in leading and developing senior technical talent.

• A Bachelor's degree in Computer Science, Engineering, or a related technical discipline, or equivalent experience.

• A BS, MS, or PhD in Computer Science, Electrical Engineering, or a related field, or equivalent experience with at least 18 years of hands-on engineering experience.

• Experience in HPC/AI security, including high-performance computing environments, RDMA-based networks, extensive GPU fleets, or GPU-specific security challenges (notable qualifications).

• Proven experience in establishing a security architecture practice (notable qualifications).

• In-depth knowledge of attestation, TPM/HSM integration, confidential computing, or workload identity frameworks implemented at scale (notable qualifications).

• Contributions to security-oriented open-source projects, standards initiatives, or engineering-focused security research (notable qualifications).

🏝️ Benefits

• Equity

• Benefits

• Equal opportunity employment