1 day ago
Base Salary
$152k - $288k/yr
Responsibilities
- Build Runtime Policy Verifier features and authorization APIs for signed-policy validation, freshness and revocation checks, rollback protection, and runtime-context binding.
- Translate canonical Agent Policy Fabric policies into runtime-specific rules and adapter constraints, safely handling unsupported policies and partial updates.
- Implement and test runtime integrations for policy consumption, runtime context, admission decisions, and audit events, including work with OpenShell.
- Create fixtures, compatibility tests, negative tests, property tests, and fuzz tests for policy behavior, integration boundaries, and failure paths.
- Deliver production-ready components with observability, performance measurement, reliability debugging, rollout plans, and operational documentation.
- Write design documents, explain implementation tradeoffs, participate in code and security reviews, and collaborate with platform, Identity, and Product Security partners.
- Own engineering work through design, implementation, validation, and delivery while communicating dependencies and risks, reviewing code, and sharing knowledge.
Requirements
- Bachelor’s degree or equivalent experience and 5+ years of relevant industry experience in systems software, backend services, distributed systems, security engineering, or policy infrastructure.
- Strong programming skills in at least one of Rust, Go, C++, or Python, with experience delivering maintainable, tested production code.
- Experience building services or systems components, including API design, integration, debugging, and error handling.
- Practical experience implementing security controls such as authorization checks, signature verification, or credential handling, with the ability to reason about trust boundaries and safe failure behavior.
- Working knowledge of Linux, service-to-service interfaces, automated testing, CI, and software release workflows.
- Ability to own engineering work through design, implementation, validation, and delivery, communicate technical tradeoffs, and collaborate through design and code reviews.
- Preferred experience with policy engines or authorization systems such as OPA/Rego, Cedar, Zanzibar-style systems, or runtime enforcement frameworks.
- Preferred experience with signed artifacts, trust-root distribution, key rotation, revocation, Sigstore, TUF, or in-toto.
- Preferred familiarity with AI-agent runtimes, sandboxed execution, tool-call governance, MCP-style routing, or credential isolation.
- Preferred experience with protobuf/gRPC, schema evolution, backward-compatible APIs, cloud and enterprise deployment environments, property testing, fuzzing, or adversarial testing.
Benefits
- Eligible for equity and benefits.
- Base salary varies by location, experience, and comparable employee pay; the posting lists Level 3 and Level 4 salary ranges.
- Applications will be accepted at least until October 25, 2026; the posting is for an existing vacancy.
About Nvidia
Nvidia designs and sells GPUs and accelerated computing platforms for data centers, AI/ML, graphics, gaming, and automotive, monetizing through hardware, software platforms (CUDA, AI frameworks), and systems like DGX and networking. Customers include cloud providers, enterprises, researchers, and OEMs. Founded in 1993 and headquartered in Santa Clara, it is a public company traded on NASDAQ under NVDA.