Senior Network Security Architect

NVIDIA•Santa Clara, CA

9d•$196,000 - $379,500

About The Position

NVIDIA’s Enterprise Network Architecture team is seeking an experienced network security professional for a broad architecture role spanning traditional network security design, identity-driven access control, security-product enablement at scale, and isolation of emerging agentic AI workloads. The position emphasizes driving adoption and operational implementation, in addition to architectural design. The role partners with Enterprise Security across IAM, network access control, and Zero Trust identity- and posture-based policy, and works with Product Security to move internally developed security tools and platforms from staging or pilot into organization-wide production use. It also designs isolation and segmentation for autonomous AI workloads and multi-tenant environments, and leads the transition of office and lab networks from flat, implicitly trusted designs toward explicit east-west segmentation while supporting existing workflows. The architect evaluates security technologies, supports audits and penetration tests, maintains architectural and security documentation, and provides validated standards, roadmaps, consultation, and critical-issue support. The role works across network, identity, platform, and application-security teams to define ownership and establish consistent security practices.

Requirements

MS or PhD in Electrical Engineering, Computer Science, Computer Engineering, Artificial Intelligence, Data Science, Mathematics, Statistics, or equivalent experience.
12+ years of experience building, managing, and supporting large-scale hybrid networks with security foundations.
Experience developing infrastructure automation using Python, Ruby, Go, or other languages.
Advanced knowledge of NIST CSF, CIS Controls, or MITRE ATT&CK frameworks.
Strong knowledge of networking protocols and encryption services and how they improve network security posture.
Experience evaluating and testing vendor platforms and in-house network initiatives for security issues.
Knowledge of cloud platforms such as AWS, Azure, or Google Cloud and their security practices and services.
Experience working cross-functionally with identity/IAM and product security teams to turn security capabilities into organization-wide standards.
Comfort operating in ambiguous emerging problem spaces, including securing AI agent platforms where standards and precedent are still developing.

Nice To Haves

Experience with ML/AI applications in security analysis, vulnerability assessment and detection, threat modeling, malware detection, binary analysis, network analytics, or security research.
Experience working with heterogeneous security platforms and building them as code.
Experience driving organization-wide adoption of a security standard or gate, such as moving a scanning or enforcement tool from staging into default production use across teams.
Direct experience securing agentic AI or autonomous coding-agent infrastructure, including sandboxing, egress control, and workload trust-domain isolation.
Experience designing segmentation for large-scale flat corporate and campus networks using internal firewalls, VLANs/VRFs, and NAC, including gaining cross-functional sign-off and making the handoff operational.

Responsibilities

Build and implement network protection frameworks, including firewalls, intrusion detection and prevention systems, VPNs, and other security technologies.
Partner with Enterprise Security on IAM, NAC/802.1X, and Zero Trust identity- and posture-based network access policies.
Enable NVIDIA security products and tooling for internal customers at scale, moving validated platforms from staging or pilot into organization-wide production use.
Design network-level isolation for autonomous/agentic AI workloads and multi-tenant environments, defining trust-domain boundaries, segmentation models, and long-term architecture.
Lead the transition of internal office and lab networks toward explicit east-west segmentation, internal firewalls, service-catalog-based access, and dynamic Zero Trust controls while avoiding disruption to existing workflows.
Research, evaluate, and recommend security solutions, products, and technologies.
Partner in and conduct security audits and penetration tests to assess network security and identify vulnerabilities.
Create and maintain security policies, procedures, network diagrams, and cross-functional feasibility reviews that clarify ownership boundaries.
Deliver guidelines, validated design standards, and direction on security standards, policies, and roadmaps such as Zero Trust.
Provide domain expertise, consultation, and critical-issue support.