Principal Engineer, Security Architecture – DGX Cloud

This is a fully remote position, open to applicants in Washington.

📋 Description

• Take ownership of a key DGX Cloud security domain from design to production.

• Collaborate closely with teams developing GPU clusters, control planes, and related services.

• Engage in early design phases, write code, and assist in implementing secure solutions.

• Create secure paved roads that engineering teams can effortlessly adopt by default.

• Develop systems that eliminate recurring categories of security risks.

• Conduct thorough threat modeling across the underlying infrastructure, orchestration layers, and tenancy boundaries.

• Perform offensive testing on designs and incorporate findings into baselines, guardrails, and detection mechanisms.

• Transform the DGX Cloud security standards into reference architectures, requirements, and established procedures.

• Collaborate with the DGX Cloud platform, production engineering, network security, and NVIDIA's central security organization.

• Integrate secure practices into CI/CD processes and the hardware lifecycle.

• Influence vertically structured teams through credibility and strong relationships rather than relying on formal authority.

⛳️ Requirements

• Generally, 15+ years of experience in software engineering, SRE, infrastructure, and security engineering.

• Strong foundation in software engineering with the capability to produce clean, maintainable, and well-tested code.

• Proficient in building and operating production services at scale.

• Experience in writing and reviewing AI-generated code and utilizing AI-assisted analysis within security engineering.

• Background in developing solutions for agents operating within systems.

• Security architecture experience in multi-tenant isolation, identity and access management, policy enforcement, vulnerability management, or detection engineering.

• Experience in deploying security designs in a production environment.

• Demonstrated ability to create threat models for complex distributed systems.

• Skilled in identifying architectural weaknesses and engineering appropriate solutions.

• Knowledge of cloud-native architecture and container orchestration, including Kubernetes.

• Practical experience in Linux systems security, including eBPF, AppArmor, or SELinux.

• Proven track record of implementing designs through teams not directly managed.

• Bachelor's degree in Computer Science, Engineering, or a related technical field (or equivalent experience) with 15+ years of relevant experience.

• Preferred experience in HPC/AI security, RDMA-based networks, large GPU fleets, or GPU-specific security.

• Preferred expertise in SPIFFE/SPIRE, TPM/HSM integration, or confidential computing.

• Preferred experience in real exploitation, red teaming, or security research.

• Preferred contributions to security-focused open-source initiatives or engineering-oriented security research.

🏝️ Benefits

• Equity

• Benefits