Senior Firmware Security Architect, Networking

Details

NVIDIA Networking's product security team is seeking a technical security architect with hands-on experience to improve the security posture of NVIDIA networking products. The role partners with firmware, hardware, and architecture teams to reduce risk, threats, and vulnerabilities while driving security features affecting networking devices worldwide.

Responsibilities

• Contribute to the security architecture of NVIDIA Networking firmware, including trust boundaries, privilege separation between firmware domains, device identity and key storage, secure boot and chain of trust, and secure update and anti-rollback flows.
• Perform security threat modeling of firmware and embedded subsystems across NVIDIA Networking products.
• Analyze complex firmware and hardware/firmware interactions to identify security weaknesses, including boot flows, privileged execution environments, and host- and network-facing management interfaces.
• Define security features and mitigations across the full device lifecycle, including provisioning, attestation, debug authorization, runtime hardening, and field updates.
• Guide engineering teams through implementation.
• Translate threat models into actionable security requirements and architectural decisions, and review designs and implementations against them.
• Partner with hardware and ASIC architects to specify the security primitives on which firmware depends and define how they are used across the product line.
• Drive secure firmware development practices, including memory-safe coding patterns in C, static analysis, and fuzzing of firmware-exposed interfaces.
• Ensure development processes meet security and coding standards.

Requirements

• Academic degree in computer science, electrical engineering, or a related field, or equivalent experience.
• At least 8 years of experience in product security, firmware security, or security research, including hands-on work with embedded or firmware codebases.
• Experience defining security policy models, including authorization schemes, role-based access control (RBAC), and administrative role separation, as well as how policies are expressed, enforced, and administered in production.
• Familiarity with applied cryptography, including secure boot, code signing, and attestation; threat modeling; common attack vectors; and mitigation techniques.
• Ability to work independently and collaboratively in a constantly evolving environment.
• Excellent communication and interpersonal skills.

Preferred Qualifications

• M.Sc. or PhD in computer science, electrical engineering, or a related technical field.
• Experience with hardware/software interfaces in networking devices, including register and MMIO programming models, DMA, mailbox and doorbell mechanisms, PCIe configuration and management interfaces, and the firmware that drives them.
• Experience with hardware roots of trust and hardware-enforced isolation, including MPU/MMU, secure enclaves, and fuse/OTP-based provisioning in SoCs or ASICs.
• Hands-on experience with networking software, including device drivers, control plane, management interfaces, or embedded network operating systems, and an understanding of how these components interact with firmware.
• Familiarity with high-scale deployment, the data center security ecosystem, and its operational challenges.

Compensation and Benefits

The base salary range is USD 184,000–287,500 for Level 4 and USD 224,000–356,500 for Level 5. Compensation is determined based on location, experience, and the pay of employees in similar positions. The role also includes eligibility for equity and benefits.

NVIDIA is an equal opportunity employer committed to fostering an inclusive work environment. Applications will be accepted at least until October 23, 2026. This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes.