Senior Security Firmware Engineer, Data Center Systems

NVIDIA•Santa Clara, CA

About The Position

NVIDIA is seeking a senior security firmware engineer for its Data Center Systems Software team. The role focuses on securing data center platforms, including baseboard management controllers, microcontrollers, and silicon roots of trust. You will design and deliver firmware that establishes and verifies platform integrity from initial execution through attestation, updates, and production recovery. You will also help set technical direction across silicon vendors, platform teams, and industry standards bodies. The engineer derives platform security requirements from business needs and threat modeling, and designs root-of-trust firmware for capabilities such as secure and measured boot, attestation, identity and cryptographic-material provisioning, and secure debug. The role owns features from architecture through implementation, coordinates decisions across internal and partner teams, and implements industry security standards such as SPDM and TCG DICE. It also leads design and code reviews and improves threat modeling, testing, continuous integration, and release practices, including adoption of AI agents in firmware development.

Requirements

Bachelor's or master's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent experience.
7+ years of software and firmware engineering experience, or equivalent depth, including products built on a hardware root of trust.
Deep understanding of root-of-trust security fundamentals, including chains of trust, signing and key management, attestation, and anti-rollback.
Strong low-level programming skills and deep understanding of SoC access controls, including privilege levels, TrustZone, and memory and bus protection.
Familiarity with server firmware and systems software.
Experience building automation using Python or a comparable language.
Record of leading technical work across teams without formal authority, including guiding other engineers on a shared deliverable.
Experience with modern AI and agents, an AI-forward mindset, and proactive adoption of new tools and techniques.
Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a distributed team.
Comfort with ambiguity and complexity; sound decision-making with incomplete information and ability to course-correct.

Nice To Haves

Contributions to open-source root-of-trust projects or industry security standards.
Experience building systems with symmetric, asymmetric, and post-quantum cryptography.
Rust firmware experience, including introducing Rust into an existing C or C++ codebase.
Experience with secure manufacturing at scale.
Security certifications such as FIPS 140-3.
Experience with hardware cryptographic accelerators, secure key storage, trusted execution frameworks such as OP-TEE or Keystone, and OpenBMC.

Responsibilities

Derive security requirements for NVIDIA data center platforms based on business needs and threat modeling.
Design and deliver root-of-trust firmware, including secure and measured boot, attestation, provisioning of identities and cryptographic material, and secure debug.
Own features from architecture through implementation, making trade-offs explicit and aligning silicon, platform, security architecture, manufacturing, and partner teams.
Implement industry security standards such as SPDM and TCG DICE.
Lead design and code reviews.
Improve threat modeling, testing, CI, and release practices.
Make AI agents a normal part of the team's firmware development process.
Provide technical direction for work spanning silicon vendors, platform teams, and industry standards bodies.
Guide other engineers on shared deliverables and lead technical work across teams without formal authority.