Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
AI @ 4
Communication @ 6
Python @ 4
Rust @ 4
Security @ 7
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
NVIDIA Data Center Systems, including DGX, HGX, and MGX platforms, deliver infrastructure for AI at scale. The Data Center Systems Software team is seeking a senior security firmware engineer to secure baseboard management controllers, microcontrollers, and silicon roots of trust. You will design and deliver firmware that proves the integrity of NVIDIA data center systems from the first instruction after reset through attestation, update, and recovery in production, while setting technical direction across silicon vendors, platform teams, and industry standards bodies.
Responsibilities
- Derive security requirements for NVIDIA data center platforms from business needs and threat modeling.
- Design and deliver root-of-trust firmware supporting secure and measured boot, attestation, identity and cryptographic material provisioning, and secure debug.
- Own features from architecture through implementation, making trade-offs explicit and gaining agreement across silicon, platform, security architecture, manufacturing, and partner teams.
- Implement industry security standards such as SPDM and TCG DICE.
- Lead design and code reviews.
- Improve threat modeling, testing, CI, and release practices.
- Incorporate AI agents into the team’s firmware development processes.
Requirements
- BS or MS in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent experience.
- 7+ years of software and firmware engineering experience, or equivalent depth, including products built on a hardware root of trust.
- Deep understanding of root-of-trust security fundamentals, including chains of trust, signing and key management, attestation, and anti-rollback.
- Strong low-level programming skills and deep understanding of SoC access controls, including privilege levels, TrustZone, memory protection, and bus protection.
- Familiarity with server firmware and systems software.
- Experience building automation using Python or a comparable language.
- Experience leading technical work across teams without formal authority and guiding other engineers on shared deliverables.
- Experience with modern AI and agents, including an AI-forward mindset and proactive adoption of new tools and techniques.
- Excellent written and verbal communication skills, particularly written communication that creates clarity and institutional memory for distributed teams.
- Ability to work effectively with ambiguity and complexity, make sound decisions quickly with incomplete information, and course-correct smoothly.
Preferred Qualifications
- Contributions to open-source root-of-trust projects or industry security standards.
- Experience with symmetric, asymmetric, and post-quantum cryptography.
- Rust firmware experience, including integrating Rust into an existing C or C++ codebase.
- Experience with secure manufacturing at scale.
- Security certifications such as FIPS 140-3.
- Experience with hardware cryptographic accelerators, secure key storage, trusted execution frameworks such as OP-TEE or Keystone, and OpenBMC.
Benefits
The expected base salary range is USD 184,000–287,500. The position also includes eligibility for equity and benefits. Applications will be accepted at least until November 10, 2026. NVIDIA is an equal opportunity employer.