Senior Software Engineer, Agent Policy Fabric

Details

The Agentic Safety Engineering team is building Agent Policy Fabric (APF), an enterprise governance layer for AI agents. APF combines signed policy, runtime verification, policy projection, credential mediation, and audit records to help govern the actions agents take across enterprise systems. The role involves turning the APF proof of concept into production software by building, implementing, testing, and operating features in policy verification, runtime integration, or conformance testing. You will own a defined feature or subsystem and help ensure that policy decisions are accurate, integrations are reliable, and failures are handled safely.

Responsibilities

• Build policy-verification features, including components of the Runtime Policy Verifier and authorization APIs, signed policy validation, freshness and revocation checks, rollback protection, and binding decisions to the correct subject and runtime context.
• Implement policy projection by translating canonical APF policy into runtime-specific rules and adapter constraints. Handle unsupported policies and partial updates safely so runtimes admit work only when the required policy has been accepted.
• Develop runtime integrations with OpenShell and other runtime systems for policy consumption, runtime context, admission decisions, and audit events. Document interface behavior and identify gaps or conflicting assumptions.
• Strengthen correctness and conformance through fixtures, compatibility tests, negative tests, property tests, and fuzz tests covering policy behavior, integration boundaries, and failure paths.
• Investigate defects and convert findings into regression coverage.
• Deliver production-ready components by adding observability, measuring performance, debugging reliability issues, and contributing to rollout plans and operational documentation.
• Write focused design documents, explain implementation tradeoffs, participate in code and security reviews, and work with platform, Identity, and Product Security partners.
• Break work into achievable milestones, communicate dependencies and risks, review code, and share knowledge with other engineers.

Requirements

• Bachelor's degree or equivalent experience, with 5+ years of relevant industry experience in systems software, backend services, distributed systems, security engineering, or policy infrastructure.
• Strong programming skills in at least one of Rust, Go, C++, or Python, with experience delivering maintainable, tested production code.
• Experience building and delivering services or systems components, including API design, integration, debugging, and error handling.
• Practical experience implementing security controls such as authorization checks, signature verification, or credential handling, with the ability to reason about trust boundaries and safe failure behavior.
• Working knowledge of Linux, service-to-service interfaces, automated testing, CI, and software release workflows.
• Ability to own engineering work through design, implementation, validation, and delivery; communicate technical tradeoffs clearly; and collaborate effectively through design and code reviews.

Preferred Qualifications

• Experience with policy engines or authorization systems such as OPA/Rego, Cedar, Zanzibar-style systems, or runtime enforcement frameworks.
• Experience with signed artifacts, trust-root distribution, key rotation, revocation, or tools such as Sigstore, TUF, or in-toto.
• Familiarity with AI-agent runtimes, sandboxed execution, tool-call governance, MCP-style routing, or credential isolation.
• Experience with protobuf/gRPC, schema evolution, backward-compatible APIs, or cloud and enterprise deployment environments.
• Use of property testing, fuzzing, or other adversarial testing techniques to find security and correctness defects.

Compensation and Benefits

The base salary range is $152,000–$241,500 USD for Level 3 and $184,000–$287,500 USD for Level 4. Base salary is determined based on location, experience, and the pay of employees in similar positions. The role is also eligible for equity and benefits.

Applications will be accepted at least until October 25, 2026. This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes. NVIDIA is committed to fostering an inclusive work environment and is an equal opportunity employer.