Senior Platform Security Engineer – Device Trust, Attestation, and Secure Browser

Details

NVIDIA's Enterprise Security organization is looking for a Senior Security Engineer passionate about platform and device security. This role includes leading device attestation and the technical direction of the enterprise secure browser program. You will define how NVIDIA establishes and continuously verifies trust in every endpoint, workload, and browsing session that touches its worldwide infrastructure across cloud, on-premises, and managed device environments.

This is a hands-on engineering opportunity at the intersection of platform security, endpoint and browser trust, and AI infrastructure. In addition to architecture, you will write production code. A core part of the charter is building SRE agents: automation tools powered by intelligent systems that monitor, diagnose, and fix the security platforms NVIDIA operates. This work turns manual response playbooks into self-healing systems. You will partner closely with device management, identity governance, network security, and platform engineering to set technical strategy and take operational ownership.

Responsibilities

• Design and implement a device attestation service that produces verifiable, cryptographically backed device posture signals from hardware roots of trust, including TPM 2.0, Secure Enclave, and measured boot, and makes them consumable as a first-class input to access decisions.
• Lead the engineering and enterprise rollout of the secure browser platform, Prisma Access Browser, including access policies, data-loss prevention controls, browser-extension governance, telemetry, and integrations with identity, Conditional Access, SASE, and ZTNA platforms.
• Build SRE agents for security platforms. Design, code, and operate agentic automation that detects degradation, triages alerts, correlates telemetry, executes safe remediation, and reduces toil across attestation, endpoint, and browser services.
• Define reference architectures that bind device trust to session trust so that browser, CLI, and agentic workflows are evaluated against consistent, continuously reevaluated posture.
• Integrate device and browser trust signals into identity and access workflows, enabling access decisions based on user identity, device integrity, browser posture, session risk, and application sensitivity.
• Scale platform-security capabilities across large and heterogeneous endpoint environments while maintaining reliability, performance, security, compliance, and a positive user experience.
• Establish service-level objectives, observability, capacity planning, and operational readiness for device-trust and secure-browser services.
• Lead incident response, post-incident reviews, and implementation of durable corrective actions.
• Partner with cross-functional collaborators across security, IT, and product teams to align on architecture, build strategy, and long-term operational ownership.

Requirements

• Bachelor's degree, master's degree, or equivalent experience in Computer Science or a related field.
• 12+ years of experience in platform, infrastructure, or security engineering, including significant depth in endpoint or platform security.
• Strong, current software development skills with a track record of shipping and operating production services.
• Experience designing, building, and owning large-scale distributed services or security platforms, including the associated operational responsibility.
• Demonstrated experience automating operations at scale, reducing toil, building self-healing or closed-loop remediation, and running services against defined SLOs.
• Solid understanding of Zero Trust architecture, device trust and posture models, endpoint attack techniques, and how identity, device, and network signals combine into access decisions.
• Working knowledge of at least one hardware or platform trust primitive, such as TPM, Secure Enclave, measured boot, TEEs, or hardware-bound credentials, and the ability to quickly develop deep expertise in attestation.
• Excellent written and verbal communication skills, with the ability to drive architecture decisions across senior and executive audiences.

Preferred Qualifications

• Hands-on experience building attestation or device posture services that run at enterprise scale with high availability and low latency.
• Deep understanding of TPM and measured boot internals, remote attestation protocols, and device-bound credentials and tokens, including DPoP, mTLS, and WebAuthn.
• Familiarity with securing non-human and machine identities and with how attestation supports service-to-service and agentic access patterns.
• Experience deploying or operating an enterprise browser or secure web access stack, including Prisma Access Browser, Island, Chrome Enterprise, SASE/ZTNA, CASB, or DLP, especially across a large developer population.
• Familiarity with browser security internals, including extension models, isolation boundaries, and policy enforcement.
• Experience building AI agents or ML-assisted automation for reliability or security operations, including guardrails, evaluation, and safe-action design, or a demonstrated track record of adopting emerging tooling and shipping with it quickly.
• Experience leading enterprise endpoint or device trust transformations, including migration away from legacy agents and posture models at scale.

Benefits

The base salary range is USD 196,000–310,500. Salary is determined based on location, experience, and the pay of employees in similar positions. The role also includes eligibility for equity and benefits.

NVIDIA is committed to fostering an inclusive work environment and is an equal opportunity employer. Applications will be accepted at least until September 14, 2026. This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes.