Senior Security Firmware Engineer, Data Center Systems

NVIDIA•Santa Clara, CA

1d•$184,000 - $287,500

About The Position

NVIDIA is seeking a highly motivated and creative senior security firmware engineer to join its Data Center Systems Software team. The role focuses on securing data center platform components, including baseboard management controllers, microcontrollers, and silicon roots of trust. You will design and deliver firmware that demonstrates the integrity of NVIDIA data center systems from initial startup through attestation, updates, and production recovery. You will also help set technical direction across silicon vendors, platform teams, and industry standards bodies.

Requirements

Bachelor's or master's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent experience.
At least 7 years of software and firmware engineering experience, or equivalent depth, including work on products built on a hardware root of trust.
Deep understanding of root of trust security fundamentals, including chains of trust, signing and key management, attestation, and anti-rollback.
Strong low-level programming skills and deep understanding of SoC access controls, including privilege levels, TrustZone, memory protection, and bus protection.
Familiarity with server firmware and systems software.
Experience building automation using Python or a comparable language.
Record of leading technical work across teams without formal authority, including guiding other engineers on a shared deliverable.
Experience with modern AI and agents, an AI-forward mindset, and proactive adoption of new tools and techniques.
Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a distributed team.
Comfort with ambiguity and complexity, sound decision-making with incomplete information, and ability to course-correct without friction.

Nice To Haves

Contributions to open-source root of trust projects or industry security standards.
Experience building systems with symmetric, asymmetric, and post-quantum cryptography.
Rust firmware experience, including introducing Rust into an existing C or C++ codebase.
Experience with secure manufacturing at scale.
Security certifications such as FIPS 140-3.
Experience with hardware cryptographic accelerators, secure key storage, trusted execution frameworks such as OP-TEE or Keystone, and OpenBMC.

Responsibilities

Derive security requirements for NVIDIA data center platforms from business needs and threat modeling.
Design and deliver root of trust firmware, including secure and measured boot, attestation, identity and cryptographic material provisioning, and secure debug.
Own features from architecture through implementation, making trade-offs explicit and building agreement across silicon, platform, security architecture, manufacturing, and partner teams.
Implement industry security standards such as SPDM and TCG DICE.
Lead design and code reviews.
Improve threat modeling, testing, continuous integration, and release practices.
Integrate AI agents into the team's firmware development practices.