Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Communication @ 6
Compliance
Go @ 6
HPC @ 4
Leadership @ 6
Linux @ 7
Networking @ 6
Observability @ 4
Python @ 6
Reporting @ 4
Security @ 4
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
Securing NVIDIA's EDA clusters requires security controls designed for workloads that are large, long-running, and performance-sensitive. As an individual contributor on the Infrastructure Security Engineering for EDA Clusters team, you will implement security controls across the compute, storage, and networking infrastructure used to design silicon, spanning on-premises data centers and multi-cloud environments. You will work alongside the engineers operating these clusters 24x7 to deploy controls, investigate behavior, and modify the running environment.
This is hands-on engineering work rather than control review. You will determine where conventional tooling applies, where it cannot, and engineer alternative solutions. The role focuses on code, instrumentation, secure-by-default infrastructure, and ownership of security outcomes.
Responsibilities
- Build and operate security controls and telemetry for EDA compute, storage, and networking, from design and production deployment through ongoing ownership.
- Engineer protections for multi-day, high-value compute jobs without degrading performance; build alternatives where heavyweight in-node agents are not viable.
- Use the network and platform as the security control plane rather than relying solely on software running inside nodes.
- Collect and normalize security signals from the fleet into the SIEM.
- Build detections and dashboards that make security telemetry actionable.
- Investigate and respond to EDA-specific threats and exposures, including hands-on containment and remediation with infrastructure and service owners.
- Automate enforcement and evidence using infrastructure-as-code and policy-as-code so secure configuration is the default state.
- Produce compliance evidence as an engineering output rather than through manual processes.
- Own the lifecycle of security technologies, including selection, rollout, operation, and replacement.
- Partner with data center operations, IT storage and networking, network engineering, cloud service provider teams, and NVIDIA's central security organization.
- Perform threat modeling and mitigation planning across network, storage, and compute environments.
Requirements
- 8 or more years of hands-on infrastructure or infrastructure-security engineering experience across on-premises and cloud environments.
- Strong Linux expertise and system-level experience.
- Experience operating or securing compute fleets at scale, including provisioning, lifecycle management, and long-running jobs.
- Working networking expertise applied to large compute environments.
- Programming or scripting fluency in Python, Go, or shell, used to ship and maintain automation, detection, and tooling.
- Solid foundations in access control, authentication, segmentation, encryption, and vulnerability lifecycle management.
- Experience delivering changes with partners outside your reporting line.
- Clear written and verbal communication skills, with the ability to work with individual engineers and leadership.
- Bachelor's degree in a relevant engineering field or equivalent experience.
Preferred Qualifications
- Security or platform engineering experience in EDA, HPC, or large research-cluster environments.
- Breadth across security domains such as IAM, EDR/XDR, CNAPP, CSPM, and zero-trust architectures, or a demonstrated ability to learn new domains quickly.
- Experience building or operating infrastructure security capabilities at a hyperscaler or security product company, including detection and enforcement systems.
- Experience with kernel- and fabric-level observability and enforcement, including eBPF, in-line and out-of-band inspection, or DPU/SmartNIC offload.
- Contributions to open-source security or infrastructure tooling.
Compensation and Benefits
- Base salary range of USD 184,000–287,500 for Level 4.
- Base salary range of USD 224,000–356,500 for Level 5.
- Equity and benefits are included.
- Applications will be accepted at least until October 24, 2026.
- NVIDIA is an equal opportunity employer and is committed to an inclusive work environment.