Senior Firmware Security Architect, Networking

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Contribute to the security framework of NVIDIA Networking firmware, encompassing trust boundaries, privilege separation, device identity and key storage, secure boot and chain of trust, as well as secure update and anti-rollback mechanisms.

• Conduct security threat modeling of firmware and embedded subsystems within NVIDIA Networking products.

• Evaluate intricate firmware and hardware/firmware interactions to uncover security vulnerabilities.

• Establish security features and mitigations throughout the device lifecycle, including provisioning, attestation, debug authorization, runtime hardening, and field updates.

• Support engineering teams throughout the implementation process.

• Convert threat models into practical security requirements and architectural choices.

• Assess designs and implementations against established security requirements.

• Collaborate with hardware and ASIC architects to define security primitives and their application across the product range.

• Promote secure firmware development methodologies, including memory-safe coding practices in C, static analysis, and fuzz testing of firmware-exposed interfaces.

• Ensure that development processes comply with security and coding standards.

⛳️ Requirements

• A degree in computer science, electrical engineering, or a related field (or equivalent experience).

• Over 8 years of experience in product security, firmware security, or security research, with direct involvement in embedded or firmware codebases.

• Proven experience in defining security policy models, including authorization frameworks, RBAC, and administrative role separation.

• Knowledge of applied cryptography, including secure boot, code signing, and attestation.

• Understanding of threat modeling, common attack vectors, and mitigation strategies.

• Capability to work both independently and collaboratively in a rapidly changing environment.

• Strong communication and interpersonal skills.

• Preferred: M.Sc. or PhD in computer science, electrical engineering, or a related technical field.

• Experience with hardware/software interfaces in networking devices, including register and MMIO programming models, DMA, mailbox and doorbell mechanisms, PCIe configuration, and management interfaces, as well as firmware.

• Familiarity with hardware roots of trust and hardware-enforced isolation, such as MPU/MMU, secure enclaves, and fuse/OTP-based provisioning.

• Practical experience with networking software, including device drivers, control planes, management interfaces, or embedded network operating systems.

• Awareness of high-scale deployment, the data center security ecosystem, and its operational challenges.

🏝️ Benefits

• Competitive salaries.

• Comprehensive benefits package.

• Equity.