Senior Security Firmware Engineer, Data Center Systems

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Extract security requirements for NVIDIA's data center platforms based on business needs and threat assessments.

• Design and implement root of trust firmware that includes secure and measured boot, attestation, identity provisioning, cryptographic material, and secure debugging.

• Take ownership of features from architectural design to coding, clearly delineate trade-offs, secure consensus among silicon, platform, security architecture, manufacturing, and partner teams, and ensure successful implementation.

• Apply industry security standards such as SPDM and TCG DICE.

• Lead design and code review sessions.

• Enhance threat modeling, testing, continuous integration, and release processes.

• Integrate AI agents into firmware development workflows.

• Establish technical direction among silicon vendors, platform teams, and industry standards organizations.

⛳️ Requirements

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related discipline, or equivalent experience.

• Over 7 years of software and firmware engineering experience, or equivalent expertise, specifically in products utilizing a hardware root of trust.

• Profound understanding of root of trust security principles: chains of trust, signing and key management, attestation, and anti-rollback mechanisms.

• Strong skills in low-level programming and a deep understanding of SoC access controls, including privilege levels, TrustZone, and memory/bus protection.

• Familiarity with server firmware and systems software.

• Experience in building automation using Python or similar programming languages.

• Proven track record of leading technical initiatives across teams without formal authority, including mentoring other engineers on shared deliverables.

• Experience with modern AI technologies and agents, reflecting an AI-driven mindset and proactive adoption of innovative tools and methods.

• Outstanding written and verbal communication abilities.

• Ability to navigate ambiguity and complexity, making informed decisions quickly with incomplete information and adjusting course smoothly.

• Contributions to open-source root of trust initiatives or industry security standards are advantageous.

• Experience with symmetric, asymmetric, and post-quantum cryptography is a plus.

• Knowledge of Rust firmware, including integrating Rust into existing C or C++ codebases, is beneficial.

• Familiarity with secure manufacturing at scale and security certifications such as FIPS 140-3 is advantageous.

• Experience with hardware cryptographic accelerators, secure key management, trusted execution frameworks like OP-TEE or Keystone, and OpenBMC is a plus.

🏝️ Benefits

• Equity

• Benefits

• Equal opportunity work environment