Description
NVIDIA DGX Cloud is an AI Factory designed to power the next generation of AI and industrial-scale breakthroughs. As the Distinguished Engineer for Security Architecture, within our Security Engineering organization, you will set the security design bar for an AI factory of hundreds of thousands of GPUs, and then build against it alongside the teams.
This is the founding architecture seat in a new organization. Security Engineering is a new organization at DGX Cloud, accountable for the security outcome of the platform, and this is the architecture function inside it. You will define the security design standard for DGX Cloud, a bar that sits above the company floor, and hold it from inside the teams doing the building.
Responsibilities:
- Set the DGX Cloud Security Bar: Own the security design standard across DGX Cloud (tenancy, GPU workloads, identity, supply chain, and isolation) and make it concrete.
- Hold the Bar by Building: Embed with engineering teams on real work: join the design, learn the code, help ship the thing rather than grade it afterward.
- Architect the Security Platform: Drive the multi-year architecture for the common security infrastructure the fleet runs on: hardened baselines and patch SLOs, deploy-time policy and admission control, workload identity, supply-chain provenance through signing and attestation, and detection and response tuned to GPU workloads.
- Engineer Classes of Risk Out of Existence: Finding a vulnerability is 4% of the work; building the system where it cannot happen again is the other 96%.
- Grow the Principal Engineering Bench: Lead a small team of Principal Engineers who report to you and hold the bar across domains.
- Multi-Functional Collaboration: Serve as DGX Cloud's primary technical connection into NVIDIA's central security organization, and partner across platform, production engineering, and network security teams.
- Communicate Risk Upward: When something is going to ship below the bar, write down the gap and what closing it would take, and put it in front of the executives who hold the risk pen.
Requirements:
- Security Engineering: Experience (typically 20+ years) across software engineering, infrastructure, and security, with recent depth securing large-scale distributed or cloud platforms.
- Architecture at Fleet Scale: A proven record owning the security architecture of a large platform end to end, across multi-tenant isolation, identity and access, policy enforcement, supply chain, and detection.
- Production-Grade Coding: Deep enough in the code to stay credible and hands-on.
- Emerging Technology: You form a view early on what is changing under this platform, and you can tell a real shift from a trend.
- Threat Modeling: The depth to threat model a complex distributed system (the substrate, the orchestration layer, the tenancy boundary) and to tell an architectural gap from a bug.
- Distributed Systems and Linux Depth: Cloud-native architecture, container orchestration (Kubernetes), Linux systems security including kernel-level primitives, and the security properties of high-throughput multi-tenant environments.
- Technical Leadership and Influence: Build consensus and organizational alignment across engineering leadership and the most senior executives.
- Leading Senior Engineers: Experience (typically 7+ years) leading and growing senior technical talent, including engineers deeper than you in their own domain.
Nice to Have:
- HPC/AI Security: Experience securing high-performance computing environments, RDMA-based networks, large GPU fleets, or GPU-specific security challenges.
- Building the Function, Not Joining It: You have stood up a security architecture practice where none existed, including the bar, the reference architectures, the working agreements, and the credibility that made teams want it there.
- Hardware Root of Trust and Workload Identity: Depth in attestation, TPM/HSM integration, confidential computing, or workload identity frameworks deployed at scale.
- Open Source and Industry Impact: Notable contributions to security-focused open source, standards work, or engineering-focused security research.
Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 320,000 USD - 488,750 USD. You will also be eligible for equity and benefits.