Senior Firmware Security Architect, Networking

NVIDIA•Austin, MA

1d•$184,000 - $356,500

About The Position

NVIDIA’s Networking product security team is seeking a hands-on technical security architect to improve the security posture of NVIDIA networking products. The role partners with firmware, hardware, and architecture teams to reduce risks, threats, and vulnerabilities, and to drive security features across products. The architect will shape firmware security architecture, including trust boundaries, privilege separation, device identity and key storage, secure boot and chain of trust, and secure update and anti-rollback flows. The role also defines lifecycle security features and mitigations, translates threat models into actionable requirements and architectural decisions, and guides engineering teams through implementation. It partners with hardware and ASIC architects on security primitives and drives secure firmware development practices.

Requirements

Academic degree in computer science, electrical engineering, or a related field, or equivalent experience.
At least 8 years of experience in product security, firmware security, or security research, including hands-on work with embedded or firmware codebases.
Experience defining security policy models, including authorization schemes, RBAC, and administrative role separation, and how policies are expressed, enforced, and administered in production.
Familiarity with applied cryptography, including secure boot, code signing, and attestation; threat modeling; common attack vectors; and mitigation techniques.
Ability to work independently and collaboratively in a constantly evolving environment.
Excellent communication and interpersonal skills.

Nice To Haves

M.Sc. or PhD in computer science, electrical engineering, or a related technical field.
Experience with hardware/software interfaces in networking devices, including register and MMIO programming models, DMA, mailbox and doorbell mechanisms, PCIe configuration and management interfaces, and the firmware that drives them.
Experience with hardware roots of trust and hardware-enforced isolation, such as MPU/MMU, secure enclaves, and fuse/OTP-based provisioning, in SoCs or ASICs.
Hands-on experience with networking software, such as device drivers, control plane, management interfaces, or embedded network operating systems, and an understanding of how these components interact with firmware.
Familiarity with high-scale deployment, the data center security ecosystem, and its operational challenges.

Responsibilities

Contribute to security architecture for NVIDIA Networking firmware, including trust boundaries, privilege separation, device identity and key storage, secure boot and chain of trust, and secure update and anti-rollback flows.
Perform security threat modeling of firmware and embedded subsystems across NVIDIA Networking products.
Analyze firmware and hardware/firmware interactions to identify security weaknesses, including boot flows, privileged execution environments, and host- and network-facing management interfaces.
Define security features and mitigations across the device lifecycle, including provisioning, attestation, debug authorization, runtime hardening, and field updates, and guide engineering teams through implementation.
Translate threat models into actionable security requirements and architectural decisions, and review designs and implementations against them.
Partner with hardware and ASIC architects to specify security primitives required by firmware and define their use across the product line.
Drive secure firmware development practices, including memory-safe coding patterns in C, static analysis, and fuzzing of firmware-exposed interfaces.
Ensure development processes meet security and coding standards.