Staff Security Engineer - PAM and Agentic Identity

NVIDIA•Us, CA

12d

About The Position

NVIDIA seeks a skilled engineer to upgrade, automate, tailor, and expand our Privileged Access Management (PAM) and Non-Human Identity (NHI) capabilities to fit agentic era expectations. This position will focus on improving the value of current platforms. It will also simplify the user and operator experience and expand secure access controls for infrastructure, automation, service identities, and agentic workflows. As AI agents, coding agents, internal developer platforms, and autonomous workflows become more common across NVIDIA, this role will help ensure privileged access and infrastructure access services can scale with stronger identity, authorization, observability, and auditability. You will engage with Enterprise Security, Product Security, infrastructure and platform SRE, developer efficiency, and business teams to reduce standing privilege, boost auditability, simplify adoption, and facilitate self-servicing at scale. This role calls for balanced hands-on experience in both infrastructure engineering and software engineering, robust system/platform engineering expertise, an SRE viewpoint, and the aptitude to build reliable automation, integrations, APIs, and internal tooling within hybrid technology environments, including AI/LLM-enabled applications and agentic workflows.

Requirements

Bachelor’s degree or Master’s degree in computer science or equivalent experience
8+ years of experience in security, infrastructure/platform engineering, SRE, IAM, or related enterprise technology roles, including 4+ years directly related to PAM and NHI solutions.
Balanced infrastructure and software development skills, with the ability to operate complex production services and build automated processes, system connections, application interfaces, connectors, and operational tooling.
Practical experience working within Linux and Windows environments, on-prem and cloud infrastructure, Kubernetes, databases, CI/CD systems, and production operations.
Experience with PAM, or secrets platforms such as Idira/CyberArk, Teleport, Azure PIM, HashiCorp Vault, or similar technologies.
Strong SRE mentality, operational rigor, and collaboration skills across global engineering, IT, security, and platform teams.

Nice To Haves

Hands-on ability to maintain access platforms, build custom connectors, integrate unsupported targets, and automate onboarding, credential, and session workflows.
Familiarity with modern access patterns such as short-lived credentials, identity-aware proxies, session recording, access requests, device trust, and workload identity.

Responsibilities

Modernize PAM, secure infrastructure access, and NHI services for NVIDIA’s agentic era, covering privileged users, service accounts, AI/coding/service agents, and autonomous workflows.
Automate and extend existing platforms through APIs, custom connectors, policy-as-code, onboarding templates, reporting, and service catalog integrations to improve self-service adoption and reduce toil.
Integrate PAM, NHI, and secure access controls into AI/LLM-enabled applications, agent frameworks, internal developer platforms, and autonomous workflows.
Expand our services coverage across Linux/Windows, cloud and on-prem systems, container orchestration platforms, data storage solutions, network devices, developer platforms, IaC, CI/CD, and internal tools.
Mature core controls including JIT access, zero standing privilege, session recording, break-glass access, credential rotation, access reviews, and audit evidence.
Own service reliability with SRE rigor, including monitoring, alerting, incident response, operational readiness, continuous improvement, and practical technology evaluation.