Staff Security Engineer - PAM and Agentic Identity

Details

NVIDIA seeks a skilled engineer to upgrade, automate, tailor, and expand its Privileged Access Management (PAM) and Non-Human Identity (NHI) capabilities for the agentic era. This position focuses on improving existing platforms, simplifying user and operator experiences, and expanding secure access controls for infrastructure, automation, service identities, and agentic workflows.

As AI agents, coding agents, internal developer platforms, and autonomous workflows become more common across NVIDIA, this role will help ensure privileged access and infrastructure access services scale with stronger identity, authorization, observability, and auditability.

The role will engage with Enterprise Security, Product Security, infrastructure and platform SRE, developer efficiency, and business teams to reduce standing privilege, improve auditability, simplify adoption, and facilitate self-service at scale. It requires hands-on experience in infrastructure engineering and software engineering, strong system and platform engineering expertise, an SRE perspective, and the ability to build reliable automation, integrations, APIs, and internal tooling within hybrid technology environments, including AI/LLM-enabled applications and agentic workflows.

Responsibilities

• Modernize PAM, secure infrastructure access, and NHI services for NVIDIA’s agentic era, covering privileged users, service accounts, AI, coding, and service agents, and autonomous workflows.
• Automate and extend existing platforms through APIs, custom connectors, policy-as-code, onboarding templates, reporting, and service catalog integrations to improve self-service adoption and reduce toil.
• Integrate PAM, NHI, and secure access controls into AI/LLM-enabled applications, agent frameworks, internal developer platforms, and autonomous workflows.
• Expand service coverage across Linux and Windows, cloud and on-premises systems, container orchestration platforms, data storage solutions, network devices, developer platforms, infrastructure as code, CI/CD, and internal tools.
• Mature core controls, including just-in-time access, zero standing privilege, session recording, break-glass access, credential rotation, access reviews, and audit evidence.
• Own service reliability with SRE rigor, including monitoring, alerting, incident response, operational readiness, continuous improvement, and practical technology evaluation.

Requirements

• Bachelor’s or master’s degree in computer science, or equivalent experience.
• 8 or more years of experience in security, infrastructure or platform engineering, SRE, IAM, or related enterprise technology roles, including 4 or more years directly related to PAM and NHI solutions.
• Balanced infrastructure and software development skills, with the ability to operate complex production services and build automated processes, system connections, application interfaces, connectors, and operational tooling.
• Practical experience with Linux and Windows environments, on-premises and cloud infrastructure, Kubernetes, databases, CI/CD systems, and production operations.
• Experience with PAM or secrets platforms such as Idira/CyberArk, Teleport, Azure PIM, HashiCorp Vault, or similar technologies.
• Strong SRE mentality, operational rigor, and collaboration skills across global engineering, IT, security, and platform teams.

Preferred Qualifications

• Hands-on ability to maintain access platforms, build custom connectors, integrate unsupported targets, and automate onboarding, credential, and session workflows.
• Familiarity with modern access patterns such as short-lived credentials, identity-aware proxies, session recording, access requests, device trust, and workload identity.

Benefits

• Equity and benefits are provided.
• NVIDIA is committed to fostering an inclusive work environment and is an equal opportunity employer.

The base salary range is USD 168,000–270,250. The base salary will be determined based on location, experience, and the pay of employees in similar positions. Applications will be accepted at least until September 14, 2026.