Senior Security Engineer – Infrastructure Security Engineering

This is a fully remote position, open to applicants in Canada.

📋 Description

• Design, construct, and integrate production-level security services for the DGX Cloud security infrastructure.

• Create Infrastructure as Code and Policy as Code for automated security compliance and enforcement.

• Architect and implement the security control plane, along with automated guardrails, controllers, and runtime security policies.

• Develop and manage scalable security-as-a-service platforms, which include identity services, automated secrets management, and real-time scanning APIs.

• Establish internal security frameworks and automated response systems throughout the entire software development lifecycle (SDLC), including testing, deployment, and maintenance.

• Perform threat modeling for intricate distributed systems and the DGX Cloud architecture.

• Detect architectural security vulnerabilities and devise solutions to mitigate them.

• Collaborate with DGX Cloud platform teams, NVIDIA security teams, and product engineering groups.

• Create streamlined processes embedding security into CI/CD pipelines and the hardware lifecycle.

⛳️ Requirements

• Typically 8+ years of experience in Site Reliability Engineering (SRE), Software Engineering, and Infrastructure Security.

• Strong foundation in software engineering; capable of writing clean, maintainable, and well-tested production code.

• Familiarity with cloud-native architectures, container orchestration (Kubernetes), and security challenges in high-throughput, low-latency settings.

• Ability to convert complex security needs into user-friendly internal services and API-first platforms.

• Demonstrated experience in integrating security products such as AuthN/AuthZ, Vaulting, Scanning, and Intrusion Detection Systems (IDS) through APIs and custom integration code.

• Extensive hands-on experience with Linux system security, including kernel-level features like eBPF, AppArmor, or SELinux.

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline (or equivalent experience).

• Experience in HPC/AI security, RDMA-based networks, or GPU-specific security challenges (preferred).

• Proficiency in workload identity frameworks such as SPIFFE/SPIRE and hardware-root-of-trust integration with TPM/HSM (preferred).

• Significant contributions to security-oriented open-source projects or engineering-focused security research (preferred).

🏝️ Benefits

• Equity

• Benefits