2 days ago
Base Salary
$184k - $288k/yr
Responsibilities
- Derive platform security requirements from business needs and threat modeling.
- Design and deliver root-of-trust firmware covering secure and measured boot, attestation, identity and cryptographic-material provisioning, and secure debug.
- Own firmware features from architecture through implementation while coordinating with silicon, platform, security architecture, manufacturing, and partner teams.
- Implement industry security standards including SPDM and TCG DICE.
- Lead design and code reviews and improve threat modeling, testing, CI, and release practices.
- Provide technical direction across teams and guide engineers on shared deliverables.
- Adopt AI agents and other new tools in firmware development.
Requirements
- Bachelor’s or master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent experience.
- 7+ years of software and firmware engineering experience, or equivalent depth, including products built on a hardware root of trust.
- Deep knowledge of chains of trust, signing and key management, attestation, and anti-rollback.
- Strong low-level programming skills and understanding of SoC access controls, privilege levels, TrustZone, memory protection, and bus protection.
- Familiarity with server firmware and systems software and experience building automation with Python or a comparable language.
- Experience leading technical work across teams without formal authority and guiding other engineers.
- Experience with modern AI and agents and proactive adoption of new tools and techniques.
- Excellent written and verbal communication skills, comfort with ambiguity, and sound decision-making with incomplete information.
- Preferred: contributions to open-source root-of-trust projects or security standards.
- Preferred: symmetric, asymmetric, and post-quantum cryptography experience.
- Preferred: Rust firmware experience, including integrating Rust into C or C++ codebases.
- Preferred: secure manufacturing at scale, FIPS 140-3 certifications, hardware cryptographic accelerators, secure key storage, OP-TEE, Keystone, or OpenBMC.
Benefits
- Eligible for equity and benefits.
- Applications will be accepted at least until November 10, 2026.
- The posting is for an existing vacancy.
About Nvidia
Nvidia designs and sells GPUs and accelerated computing platforms for data centers, AI/ML, graphics, gaming, and automotive, monetizing through hardware, software platforms (CUDA, AI frameworks), and systems like DGX and networking. Customers include cloud providers, enterprises, researchers, and OEMs. Founded in 1993 and headquartered in Santa Clara, it is a public company traded on NASDAQ under NVDA.