Senior Infrastructure Security Engineer – EDA Clusters

NVIDIA•US, CA, Remote, WA

1d•$184,000 - $356,500

About The Position

NVIDIA is hiring an individual contributor for Infrastructure Security Engineering focused on EDA clusters. The role implements security controls across compute, storage, and networking used by hardware engineers to design silicon, across on-premises data centers and multi-cloud environments. It works closely with the engineers operating these clusters and involves deploying controls, investigating behavior, and changing the live environment. This is hands-on security engineering: deciding where conventional tools fit, and building alternatives where the scale, duration, or performance sensitivity of EDA workloads makes standard approaches unsuitable. The engineer will deliver code, instrumentation, and secure-by-default infrastructure, and own the security outcomes and lifecycle of assigned technologies.

Requirements

At least 8 years of hands-on infrastructure or infrastructure-security engineering across on-premises and cloud environments.
Strong Linux expertise at the system level.
Experience operating or securing compute fleets at scale, including provisioning, lifecycle management, and the operational realities of long-running jobs.
Working networking expertise applied to large compute environments.
Fluency in Python, Go, or shell scripting for automation, detection, and tooling that has been shipped and maintained.
Solid foundations in access control, authentication, segmentation, encryption, and vulnerability lifecycle.
Track record of delivering changes with partners who do not report to you.
Clear written and verbal communication skills, with credibility among individual engineers and leadership.
A bachelor's degree in a relevant engineering field or equivalent experience.

Nice To Haves

Security or platform engineering experience in EDA, HPC, or large research-cluster environments.
Breadth across security domains such as IAM, EDR/XDR, CNAPP, CSPM, or zero-trust architectures, or a demonstrated ability to learn new domains quickly.
Experience building or operating infrastructure security capabilities at a hyperscaler or security product company, engineering detection and enforcement systems rather than simply deploying another party's tools.
Experience with kernel- and fabric-level observability and enforcement, such as eBPF, in-line and out-of-band inspection, or DPU/SmartNIC offload, as alternatives to heavyweight in-node agents.
Contributions to open-source security or infrastructure tooling.

Responsibilities

Build, deploy, and operate security controls and telemetry for EDA compute, storage, and networking.
Engineer protections for long-running, high-value compute jobs without degrading workload performance, including alternatives when heavyweight in-node agents are unsuitable.
Use network and platform controls as part of the security control plane rather than relying solely on software running inside nodes.
Collect and normalize fleet security signals into the SIEM, and build actionable detections and dashboards.
Investigate EDA-specific threats and exposure, and carry out containment and remediation with infrastructure and service owners.
Automate enforcement and evidence through infrastructure-as-code and policy-as-code, making secure configuration the default and producing compliance evidence through engineering.
Own the lifecycle of security technologies, including selection, rollout, operation, and eventual replacement.
Partner with data center operations, IT storage and networking, network engineering, cloud service provider teams, and NVIDIA's central security organization.
Conduct threat modeling and mitigation planning across network, storage, and compute.