Senior Security Architect

NVIDIA•Santa Clara, CA

4d•$184,000 - $356,500

About The Position

NVIDIA is seeking an outstanding engineer to be a Senior Security Architect focused on securing at-scale infrastructure, high-performance computing environments, and AI cluster systems. This role involves protecting sophisticated computing hardware, software, and datacenter platforms. The architect will design, implement, and evolve security systems, policies, and operational practices to safeguard critical infrastructure and intellectual property. Collaboration with various teams, including engineering, infrastructure, research, platform, legal, compliance, and executive teams, will be essential for identifying risks, responding to incidents, and building resilient security programs for next-generation AI infrastructure.

Requirements

Experience securing large-scale Linux infrastructure.
Proven understanding of risk management, threat modeling, vulnerability management, and access control.
Experience with incident response, disaster recovery, and breach handling.
Knowledge of compliance, governance, and data protection requirements.
Clear written and verbal communication with technical and leadership audiences.
Experience in programming secure computing environments, with proficiency in C/C++
BS in Computer Science, Engineering, Cybersecurity, or equivalent experience with 8+ yrs of industry experience
Experience with system level threat modeling, risk management frameworks and risk mitigation techniques.
Experience with compute and networking systems security architecture and engineering
Experience in securing AI agents using sandboxing technologies and AI-based threat detection (e.g. Mythos)

Nice To Haves

Experience with modern authentication and identity frameworks such as OAuth 2.1, OIDC, Kerberos, FIDO2/WebAuthn.
Experience with Microsoft Active Directory and Entra ID, including cross-realm trusts and identity federation (SCIMv2)
Experience managing centralized Linux identity (FreeIPA/RHEL IdM/SSSD), including PKI lifecycle management and Host-Based Access Control.
Linux kernel hardening (SELinux/AppArmor) and observability (eBPF).
Developing secure software in Rust, prioritizing memory safety.
Experience hardening HPC schedulers and storage, Slurm alongside parallel filesystems like Lustre and NFS.
Experience securing containerized workloads (Docker, Enroot, Kubernetes).
Knowledge of high-speed fabric security like InfiniBand PKeys/MKeys.
Zero Trust, ZTNA, VRFs, VLANs, performance-optimized firewalls.
Use of advanced vulnerability management and supply chain mitigation (CVSS 4.0, SBOM).

Responsibilities

Build and enforce security controls, systems, and policies for cluster infrastructure of new NVIDIA hardware.
Identify, assess, and reduce cybersecurity risks; report major risks clearly to leadership.
Develop and lead incident response and disaster recovery plans.
Investigate security incidents and drive root-cause analysis.
Ensure systems meet IT, legal, regulatory, and information security standards.
Improve security governance, documentation, and audit readiness.
Train peers and users on practical security standard methodologies.
Work with infrastructure, networking, storage, OS, firmware, and application teams to harden systems.