Staff Security Engineer - PAM and Agentic Identity

NVIDIA•Santa Clara, CA

9d•$168,000 - $270,250

About The Position

NVIDIA seeks a Staff Security Engineer to modernize and expand its Privileged Access Management (PAM), secure infrastructure access, and Non-Human Identity (NHI) capabilities for an increasingly agentic environment. The role will improve existing platforms, simplify user and operator experiences, and scale secure access controls for infrastructure, automation, service identities, AI and coding agents, and autonomous workflows. The work will strengthen identity, authorization, observability, and auditability across NVIDIA. The engineer will partner with Enterprise Security, Product Security, infrastructure and platform SRE, developer efficiency, and business teams. The role combines infrastructure and software engineering, platform and systems engineering, SRE practices, and development of automation, integrations, APIs, and internal tools in hybrid environments, including AI/LLM-enabled applications and agentic workflows.

Requirements

Bachelor’s or master’s degree in computer science, or equivalent experience.
At least 8 years of experience in security, infrastructure/platform engineering, SRE, IAM, or related enterprise technology roles, including at least 4 years directly related to PAM and NHI solutions.
Balanced infrastructure and software development skills, including the ability to operate complex production services and build automated processes, system connections, application interfaces, connectors, and operational tooling.
Practical experience with Linux and Windows environments, on-premises and cloud infrastructure, Kubernetes, databases, CI/CD systems, and production operations.
Experience with PAM or secrets platforms such as Idira/CyberArk, Teleport, Azure PIM, HashiCorp Vault, or similar technologies.
Strong SRE mentality, operational rigor, and collaboration skills across global engineering, IT, security, and platform teams.

Nice To Haves

Hands-on ability to maintain access platforms, build custom connectors, integrate unsupported targets, and automate onboarding, credential, and session workflows.
Familiarity with modern access patterns such as short-lived credentials, identity-aware proxies, session recording, access requests, device trust, and workload identity.

Responsibilities

Modernize PAM, secure infrastructure access, and NHI services for privileged users, service accounts, AI/coding/service agents, and autonomous workflows.
Automate and extend existing platforms using APIs, custom connectors, policy-as-code, onboarding templates, reporting, and service catalog integrations to improve self-service and reduce toil.
Integrate PAM, NHI, and secure access controls into AI/LLM-enabled applications, agent frameworks, internal developer platforms, and autonomous workflows.
Expand service coverage across Linux and Windows, cloud and on-premises systems, container orchestration platforms, data storage solutions, network devices, developer platforms, IaC, CI/CD, and internal tools.
Mature controls including just-in-time access, zero standing privilege, session recording, break-glass access, credential rotation, access reviews, and audit evidence.
Own service reliability through monitoring, alerting, incident response, operational readiness, continuous improvement, and practical technology evaluation.