NVIDIA
PrincipalCyberSecurityEngineer
Neural analysis suggests this role is
optimal for Lead candidates.
“Principal Cyber Security Engineer at NVIDIA. Skills: Agentic Identity and Security, Cyber Security Engineering, Distributed Systems, Identity and Access Management, Cloud Security, API Development, Security Architecture. Architect and build agent identity security features for agent use cases across cloud, on-premises, and hybrid environments. Rapidly prototype, validate, and iterate on innovative ways when gaps remain, such as credential brokering, token exchange, delegation, workload identity,”
What You'll Achieve.
Bring the right infrastructure into production; Evolve ideas into reliable production systems; Improve engineering velocity and consistency
Industry & Context.
Turn complex problems into practical designs; Frame sophisticated problem spaces; Ambiguous security and identity problems
What They're Looking For.
Must Have
Bachelor’s degree or Master’s degree or equivalent experience in Computer Science or a related field, 15+ years in software engineering, security engineering, identity, distributed systems, or related areas, including significant hands-on technical leadership, Proven track record to frame sophisticated problem spaces, define an MVP, prototype quickly, and evolve ideas into reliable production systems, software engineering skills, including crafting and building backend services, APIs, automation, or platform components in programming environments, Experience in offensive security, adversarial thinking, red teaming, or attack-path analysis, capable of applying that perspective to architecture decisions and security tradeoffs, Experience with device trust, endpoint posture, or hardware-backed trust signals, and an understanding of how device identity and device state can strengthen access decisions for agentic, workload, and human-to-agent workflows, Hands-on experience with container technologies (Docker, containerd, or equivalent), network infrastructure (proxies, routing, firewalls, VPNs), and general cloud service provider (CSP) environments (AWS, Azure, or GCP), Good understanding of existing and emerging identity and access concepts such as OAuth 2.0/2.1, OIDC, SCIM, mTLS, SPIFFE, MCP, AuthZen, certificate lifecycle management, and secrets management
Nice to Have
full-stack or software engineering instincts, including the ability to build reusable frameworks, APIs, and tooling that improve engineering velocity and consistency, Experience with agentic or AI-adjacent systems, such as tool-using applications, workflow orchestration, evaluation loops, policy controls, memory/context services, or trust and discovery systems, Familiarity with AI-specific security risks such as prompt injection, tool misuse, unauthorized access expansion, data exfiltration, or unsafe delegation patterns
What You'll Do.
Architect and build agent identity security features for agent use cases across cloud
and hybrid environments
and iterate on innovative ways when gaps remain
such as credential brokering
and lifecycle management
Rapidly identify the highest-value MVP for ambiguous security and identity problems
validate them with partner teams
and iterate toward production-ready services
Build reusable skills
and integration patterns that help internal teams embrace secure agent identity approaches across enterprise tools and platforms
Contribute to architectural direction
and engineering standards for agentic identity and related security infrastructure across the company
Help evaluate emerging standards
open-source technologies
and vendor capabilities in agentic identity
and translate the relevant pieces into pragmatic internal builds and roadmap recommendations
How You'll Work.
Team & Collaboration
Work across identity, security, platform, and application teams; Partner closely with teams across Enterprise Security, Product Security, Enterprise AI, Enterprise Product and relevant platform teams to align architecture with real workflow needs and operational constraints; Collaborate across organizational boundaries
Process & Methodology
Define an MVP, Identify the highest-value MVP
Full Job Description
At NVIDIA, AI agents are becoming part of how work gets done across engineering and enterprise workflows! As these systems begin to access tools, call APIs, and participate in multi-step operations, the identity and security controls built primarily for human users need to evolve to support non-human and agent-driven workflows safely and reliably. We are seeking a Principal Engineer to help define and build core agentic identity capabilities that enable trusted AI agents across NVIDIA’s internal ecosystem. This is a hands-on engineering role for someone who can turn complex problems into practical designs, quickly prototype solutions, and work across identity, security, platform, and application teams to bring the right infrastructure into production. ****What you will be doing:**** * Architect and build agent identity security features for agent use cases across cloud, on-premises, and hybrid environments. Apply relevant standards and patterns where possible. Rapidly prototype, validate, and iterate on innovative ways when gaps remain, such as credential brokering, token exchange, delegation, workload identity, and lifecycle management. * Rapidly identify the highest-value MVP for ambiguous security and identity problems, prototype solutions, validate them with partner teams, and iterate toward production-ready services. * Build reusable skills, CLI tools, APIs, and integration patterns that help internal teams embrace secure agent identity approaches across enterprise tools and platforms. * Partner closely with teams across Enterprise Security, Product Security, Enterprise AI, Enterprise Product and relevant platform teams to align architecture with real workflow needs and operational constraints. * Contribute to architectural direction, reviews, and engineering standards for agentic identity and related security infrastructure across the company. * Help evaluate emerging standards, open-source technologies, and vendor capabilities in agentic identity, and transla
Applying for this Principal Cyber Security Engineer role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about NVIDIA?
Real rants from real employees. Read before you apply.