Note: The job is a remote job and is open to candidates in USA. NVIDIA is hiring a Senior Infrastructure Security Engineer to build and operate security controls for its EDA clusters across on-premises data centers and multi-cloud environments. The role focuses on securing compute, storage, and networking through engineering, telemetry and detection, incident response, automation, and threat modeling.
Responsibilities
- Build and operate security controls and telemetry for EDA compute, storage, and networking - design, ship to production, then own them
- Engineer around hard constraints. Protect multi-day, high-value compute jobs without degrading them. Where heavyweight in-node agents are not viable, build the workable answer instead
- Make the network and platform the control plane. Protection can't depend solely on what runs inside the node
- Instrument for detection. Collect and normalize security signals from the fleet into our SIEM, and build the detections and dashboards that turn it into something actionable. Log collection alone is not monitoring
- Investigate and respond. Chase down EDA-specific threats and exposure, and execute containment and remediation hands-on with infrastructure and service owners
- Automate enforcement and evidence. Infrastructure-as-code and policy-as-code so secure configuration is the default state, with compliance evidence produced as an engineering output rather than a manual exercise
- Run the lifecycle of the security technologies you own: selection, rollout, operation, and eventual replacement
- Work across boundaries. Partner directly with data center operations, IT storage and networking, network engineering, CSP teams, and NVIDIA's central security organization on shared outcomes
- Think like an adversary. Threat modeling and mitigation planning across network, storage, and compute
Skills
- 8+ years of hands-on infrastructure or infrastructure-security engineering across on-prem and cloud environments
- Strong Linux depth - you are comfortable at the system level, not just the console level
- Real experience operating or securing compute fleets at scale: provisioning, lifecycle, and the operational realities of long-running jobs
- Working networking expertise applied to large compute environments
- Programming/scripting fluency (Python, Go, or shell) used for automation, detection, and tooling you've shipped and maintained
- Solid foundations in access control, authentication, segmentation, encryption, and vulnerability lifecycle
- A track record of landing changes with partners who don't report to you
- Clear written and verbal communication - credible with individual engineers and with leadership
- A Bachelor's degree in a relevant engineering field or equivalent experience
- Security or platform engineering inside EDA, HPC, or large research-cluster environments
- Breadth across security domains - IAM, EDR/XDR, CNAPP, CSPM, zero-trust architectures - or a demonstrated pattern of picking up new domains fast
- Built or operated infrastructure security capabilities at a hyperscaler or a security product company - you engineered detection and enforcement systems rather than deploying someone else's
- Experience with kernel- and fabric-level observability and enforcement - eBPF, in-line and out-of-band inspection, DPU/SmartNIC offload - as an alternative to heavyweight in-node agents
- Contributions to open-source security or infrastructure tooling
Benefits
- You will also be eligible for equity
Company Overview
Company H1B Sponsorship