Senior Software Engineer, Attestation Services – DGX Cloud

Details

NVIDIA's Attestation and Trust Services team builds secure cloud services that help customers verify that NVIDIA platforms are healthy, resilient, and ready for critical workloads. The role sits at the intersection of hardware, security, and large-scale distributed systems, with close collaboration across security, silicon, platform, and cloud teams.

Responsibilities

• Build and manage core attestation cloud services.
• Develop APIs, SDK and CLI integration points, and integrations that confirm the integrity of NVIDIA platforms across data center, AI, networking, and partner environments.
• Convert hardware trust mechanisms and standards into production-ready solutions.
• Improve reliability and operational maturity through SLOs, SLIs, alerting, runbooks, incident response, and safe rollout practices.
• Design resilient service behavior for dependency failures, caching challenges, regional issues, customer-side resilience needs, and graceful degradation.
• Architect trust-material distribution for certificate status, revocation updates, signed metadata, RIM artifacts, trust bundles, offline verification, and customer-managed resilience models.
• Implement appraisal, policy, and verification workflows that evaluate attestation evidence against endorsements, reference values, certificate status, and security requirements.
• Provide technical leadership and mentoring in distributed systems development, production debugging, reliability tradeoffs, observability, and operational simplicity.

Requirements

• Bachelor's or master's degree in Computer Science, Information Security, or a related field, or equivalent experience.
• 12+ years of experience designing and building large-scale distributed systems or cloud services, including at least 3 years in security, attestation, or trusted computing.
• Experience owning production services, including monitoring, alerting, incident response, root-cause analysis, and long-term operational improvements.
• Experience developing and maintaining REST and/or gRPC APIs, microservices, control planes, background tasks, caches, queues, data stores, and customer-facing integrations.
• Proficiency in Go or Java. Experience with C++ or Rust is a plus.
• Hands-on experience with Kubernetes, containers, CI/CD, infrastructure as code, observability tools, and at least one major cloud provider: AWS, GCP, Azure, or OCI.
• Knowledge of distributed systems practices including retries, timeouts, circuit breakers, backpressure, rate limiting, caching, consistency, idempotency, failover, and dependency isolation.
• Understanding of security fundamentals including PKI, TLS/mTLS, certificate lifecycle, signing, secrets management, authentication and authorization, and secure service-to-service communication.

Preferred Qualifications

• Interest in security-critical systems, trust infrastructure, secure service development, attestation, or confidential computing.
• Experience operating customer-facing cloud services with formal SLOs, error budgets, safe deployment systems, production-readiness reviews, resilience testing, or chaos/game-day practices.
• Experience with attestation, confidential computing, trusted execution environments, TPMs, DICE, SPDM, IETF RATS, EAT, CoRIM, HSMs, hardware roots of trust, secure boot, GPU or accelerator attestation, or related open-source and standards efforts.
• Experience with identity, PKI, certificate status and revocation, signing, secrets management, trust-material distribution, or control-plane reliability services.
• Experience building services for multi-region, multi-cloud, sovereign, GovCloud, edge, disconnected, air-gapped, or customer-hosted environments.

Compensation and Benefits

• Base salary range: $224,000–$356,500 for Level 5, or $272,000–$431,250 for Level 6, depending on location, experience, and compensation for similar positions.
• Eligible for equity and benefits.
• Full-time position.