Distinguished Engineer, Security Architecture - DGX Cloud

Overview

Distinguished Engineer, Security Architecture for NVIDIA DGX Cloud, within the Security Engineering organization. You set the security design standard for an AI factory of hundreds of thousands of GPUs, build against it alongside engineering teams, and lead a small team of Principal Engineers.

What you'll do

• Set the DGX Cloud security bar: own the security design standard across tenancy, GPU workloads, identity, supply chain, and isolation, with reference architectures, golden paths, and requirements engineers can build against.
• Hold the bar by building: embed with engineering teams on real work, join the design, learn the code, and help ship.
• Architect the security platform: drive the multi-year architecture for hardened baselines and patch SLOs, deploy-time policy and admission control, workload identity, supply-chain provenance through signing and attestation, and detection and response tuned to GPU workloads.
• Engineer classes of risk out of existence: attack recurring risk at its architectural root, including offensively against our own designs, and feed findings back into paved roads, baselines, and detections.
• Grow the Principal Engineering bench: lead Principal Engineers who report to you, set their technical direction, hire into gaps, and grow each into deeper scope.
• Serve as DGX Cloud's primary technical connection into NVIDIA's central security organization, partnering across platform, production engineering, and network security teams.
• Communicate risk upward: document gaps below the bar and what closing them would take, and put them in front of the executives who hold the risk.

What you'll need

• Experience (typically 20+ years) across software engineering, infrastructure, and security, with recent depth securing large-scale distributed or cloud platforms.
• Proven record owning the security architecture of a large platform end to end, across multi-tenant isolation, identity and access, policy enforcement, supply chain, and detection.
• Production-grade coding: have written, shipped, and operated production services at scale, and can read an unfamiliar codebase closely enough to see where its security assumptions break.
• Emerging technology: form early views on what is changing under the platform, including AI-generated code, AI-assisted security analysis, and agents acting inside systems.
• Threat modeling depth for complex distributed systems (substrate, orchestration layer, tenancy boundary), and the ability to tell an architectural gap from a bug.
• Distributed systems and Linux depth: cloud-native architecture, Kubernetes, Linux systems security including kernel-level primitives, and security properties of high-throughput multi-tenant environments.
• Technical leadership and influence: build consensus across engineering leadership and senior executives, and turn a fast-moving risk picture into something executives can act on.
• Experience (typically 7+ years) leading and growing senior technical talent, including engineers deeper than you in their own domain.
• Bachelor's degree in Computer Science, Engineering, or a related technical field, or equivalent experience: BS, MS, or PhD in Computer Science, Electrical Engineering, or a related field, or equivalent experience with a minimum of 18+ years of practical engineering experience.

Nice to have

• HPC/AI security: experience securing high-performance computing environments, RDMA-based networks, large GPU fleets, or GPU-specific security challenges.
• Experience standing up a security architecture practice where none existed, including the bar, reference architectures, working agreements, and credibility with teams.
• Depth in attestation, TPM/HSM integration, confidential computing, or workload identity frameworks deployed at scale.
• Notable contributions to security-focused open source, standards work, or engineering-focused security research.

Details

• Location: US, WA, Remote.
• Base salary range: 320,000 USD to 488,750 USD, determined by location, experience, and pay of employees in similar positions. Eligible for equity and benefits.
• Applications accepted at least until October 15, 2026. This posting is for an existing vacancy.