Principal Engineer, Security Architecture - DGX Cloud

Overview

A founding Principal Engineer seat in Security Architecture within the Security Engineering organization of NVIDIA DGX Cloud, owning a core security domain of the AI factory from design through production and working as a senior IC embedded in engineering teams.

What you'll do

• Own a core DGX Cloud security domain end to end, such as tenant and GPU workload isolation, workload identity, infrastructure and network, supply-chain provenance, hardened baselines and patching, or deploy-time policy and admission control.
• Embed with the teams building the platform, join their designs early, write code, and help land the security considerations.
• Engineer the secure path into the platform so it is also the easy path.
• Engineer classes of risk out of existence by fixing the paved road when teams repeatedly miss the same requirement.
• Run deep-dive threat models across the substrate, orchestration layer, and tenancy boundary, and attack your own designs offensively, feeding findings back into baselines, guardrails, and detections.
• Turn the DGX Cloud security bar into reference architectures, requirements, and golden paths teams can build against, raising gaps early in design with the work to close them attached.
• Partner with DGX Cloud platform, production engineering, and network security teams, and NVIDIA's central security organization, to make the secure path real in CI/CD and the hardware lifecycle.

What you'll need

• Experience (typically 15+ years) across software engineering, SRE, infrastructure, and security engineering, building systemic solutions rather than manual operations or tool administration.
• Strong software engineering background with the ability to write clean, maintainable, well-tested code, comfortable building and operating production services at scale.
• Ability to work with emerging technology, including writing and reviewing AI-generated code, using AI-assisted analysis in security engineering, and building for agents that act inside owned systems.
• Designs owned that were built and run in areas like multi-tenant isolation, identity and access, policy enforcement, vulnerability management, or detection engineering, and operated after launch.
• Proven ability to build threat models for complex distributed systems, identify architectural gaps rather than only bugs, and engineer solutions that close them.
• Cloud-native architecture, container orchestration (Kubernetes), and hands-on Linux systems security including kernel-level primitives (eBPF, AppArmor, or SELinux).
• Experience landing designs through teams you do not own, with influence rather than authority.
• Bachelor's degree in Computer Science, Engineering, or a related technical field (or equivalent experience) with 15+ years of relevant experience.

Nice to have

• Experience securing high-performance computing environments, RDMA-based networks, large GPU fleets, or GPU-specific security challenges.
• Expertise in workload identity frameworks (e.g., SPIFFE/SPIRE), hardware root of trust (TPM/HSM) integration, or confidential computing.
• Real exploitation, red team, or security research experience converted into engineering controls, guardrails, and detections.
• Notable contributions to security-focused open-source projects or a track record of engineering-focused security research.

Details

• Location: US, WA, Remote.
• Base salary range: 272,000 USD - 431,250 USD, plus eligibility for equity and benefits.
• Applications accepted at least until October 14, 2026; this posting is for an existing vacancy.