Principal Cybersecurity Engineer - Agentic Identity and Security

Details

AI agents are becoming part of engineering and enterprise workflows, accessing tools, calling APIs, and participating in multi-step operations. This role focuses on evolving identity and security controls to support non-human and agent-driven workflows safely and reliably.

The Principal Engineer will define and build core agentic identity capabilities that enable trusted AI agents across NVIDIA's internal ecosystem. This is a hands-on engineering role involving complex problem solving, practical design, rapid prototyping, and collaboration across identity, security, platform, and application teams.

Responsibilities

• Architect and build agent identity security features for agent use cases across cloud, on-premises, and hybrid environments.
• Apply relevant standards and patterns, and prototype solutions for credential brokering, token exchange, delegation, workload identity, and lifecycle management.
• Identify the highest-value MVP for ambiguous security and identity problems, validate solutions with partner teams, and evolve them into production-ready services.
• Build reusable skills, CLI tools, APIs, and integration patterns that help internal teams adopt secure agent identity approaches across enterprise tools and platforms.
• Partner with Enterprise Security, Product Security, Enterprise AI, Enterprise Product, and relevant platform teams to align architecture with workflow needs and operational constraints.
• Contribute to architectural direction, reviews, and engineering standards for agentic identity and related security infrastructure.
• Evaluate emerging standards, open-source technologies, and vendor capabilities in agentic identity, translating relevant capabilities into internal builds and roadmap recommendations.

Requirements

• Bachelor's or Master's degree, or equivalent experience, in Computer Science or a related field.
• 15+ years of experience in software engineering, security engineering, identity, distributed systems, or related areas, including significant hands-on technical leadership.
• Proven ability to frame sophisticated problem spaces, define an MVP, prototype quickly, and evolve ideas into reliable production systems.
• Strong software engineering skills, including building backend services, APIs, automation, or platform components. Ability to quickly learn new languages, frameworks, and tools as needed.
• Experience in offensive security, adversarial thinking, red teaming, or attack-path analysis, with the ability to apply that perspective to architecture decisions and security tradeoffs.
• Experience with device trust, endpoint posture, or hardware-backed trust signals, and understanding of how device identity and state can strengthen access decisions for agentic, workload, and human-to-agent workflows.
• Ability to collaborate across organizational boundaries, balance security with usability and adoption, and drive pragmatic technical outcomes through influence.
• Hands-on experience with container technologies such as Docker or containerd; network infrastructure including proxies, routing, firewalls, and VPNs; and cloud service provider environments such as AWS, Azure, or GCP.
• Understanding of identity and access concepts including OAuth 2.0/2.1, OIDC, SCIM, mTLS, SPIFFE, MCP, AuthZen, certificate lifecycle management, and secrets management.

Preferred Qualifications

• Strong full-stack or software engineering instincts, including the ability to build reusable frameworks, APIs, and tooling that improve engineering velocity and consistency.
• Experience with agentic or AI-adjacent systems, such as tool-using applications, workflow orchestration, evaluation loops, policy controls, memory/context services, or trust and discovery systems.
• Familiarity with AI-specific security risks such as prompt injection, tool misuse, unauthorized access expansion, data exfiltration, and unsafe delegation patterns.

Compensation and Benefits

• Base salary range: USD 240,000–379,500 per year, determined by location, experience, and pay for similar positions.
• Eligible for equity and benefits.

NVIDIA is committed to fostering a diverse work environment and is an equal opportunity employer. Applications will be accepted at least until April 26, 2026. This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes.