Principal AI Safety Architect

Supermicro•San Jose, CA

1d•Onsite

About The Position

Supermicro is hiring a Principal AI Safety Engineer in Technology Enablement to help customers run agentic AI on Supermicro infrastructure in named enterprises and in GPU clouds (neoclouds). This is a customer-facing design role, not a security operations role. You will join architecture workshops, define how agents and tenants are isolated, identified, governed, and audited, and write that control layer into the design before systems are quoted or shipped. Enterprise work is one customer, one data boundary. Neocloud work is many tenants on a shared factory. You will cover both. You will work with Supermicro solution architects, factory engineering, cloud and enterprise sales, and NVIDIA field teams. Supermicro partners with NVIDIA, AMD, and Intel, and with leading storage and networking companies. This role is majority NVIDIA-focused, including NVIDIA runtime and guardrail software, confidential computing, and data-center security features where they belong in the design. The same control model must still work when a factory includes AMD, Intel, or partner storage and networking. San Jose, CA location is preferred. Exceptional Principal-level candidates elsewhere in the United States will be considered if they can travel for customer workshops.

Requirements

Bachelor’s or master’s in Computer Science, Computer Engineering, Information Technology, or equivalent.
12+ years in security engineering, platform security, cloud security, or applied AI systems.
5+ years accepted with hands-on production work on agent or LLM runtime controls (sandbox, policy engine, gateway, or equivalent — not training-only or policy-paper backgrounds).
Able to prototype and demonstrate controls: Python or equivalent, containers, and policy or guardrail configuration.
Hands-on with at least two of: NVIDIA OpenShell, NVIDIA Sentry / BlueField / DOCA, confidential computing, inference gateway, NIM, or NeMo Guardrails. OpenShell or Sentry strongly preferred after this announcement.
Hands-on experience with sandboxes, policy engines, secret proxies, identity for agents, or equivalent.
Experience with at least one of: regulated enterprise AI or multi-tenant GPU / AI cloud isolation. Both strongly preferred.
Working knowledge of NVIDIA enterprise and safety software and how it lands on server, DPU, and rack designs.
Ability to design controls for mixed GPU/CPU environments and for shared-cluster tenancy.
Comfortable presenting to customer security leaders, cloud architects, and NVIDIA technical teams.

Nice To Haves

NVIDIA certification desirable.

Responsibilities

Customer-facing AI safety architecture — enterprise and neocloud: Join engagements when customers will deploy agents, tools, or regulated inference. Enterprise: safety profile for a single owner — data boundary, air-gap or private cloud, human gates, audit, and what OpenShell vs Sentry vs confidential computing actually enforce in that boundary. Neocloud: tenant isolation, inference-gateway policy, quota and blast-radius controls, confidential computing and DPU isolation between tenants, and attested evidence a cloud customer can hand to their own CISO (identity, policy decisions, telemetry — not agent self-reporting). Set proof-of-concept pass/fail criteria so safety is tested, not assumed. Define what is enforceable on current installed NVIDIA systems versus what requires BlueField-4 Sentry or Vera-class platforms.
Controls on Supermicro AI factories: Map the NVIDIA Open Agent Safety Platform onto Supermicro server, rack, and cluster designs used by enterprises and GPU cloud operators. Place OpenShell (runtime, least-privilege policy, sandbox) and Sentry (BlueField-4 / DOCA, out-of-band monitoring, millisecond containment) in the design. Identify where confidential computing, SmartNIC/DPU security, multi-tenant networking, air-gapped operation, or partner security platforms belong. Design one control model that still works when a factory includes AMD, Intel, or partner storage and networking. OpenShell’s extendability off NVIDIA CPUs is part of that model, not an afterthought. Produce the safety chapter of the quote package: what is in hardware, what is in runtime, what remains a customer operational control.
Field enablement and demonstration: Create safety design templates for both motions: named-enterprise factory and multi-tenant neocloud. Help solution architects start the conversation; you own the safety architecture when agents or tenancy are in scope. Contribute customer-facing material and represent Supermicro in technical sessions with enterprises, GPU cloud operators, NVIDIA, and other partners. You will put a working control demo in front of a customer and an NVIDIA architect. OpenShell at minimum; Sentry / BlueField-4 / confidential computing where the platform supports it.