Skip to content

NVIDIA

US, CA, Santa Clara; US, NC, Remote and 5 more

Senior Security Firmware Engineer, Data Center Systems

Posted 2 days ago

Level
Senior
Experience
7+ years
Work style
Remote
Full-time
Area
Security engineering

At a glance

The role in plain English

This role involves designing and delivering security firmware for NVIDIA's data center systems, focusing on baseboard management controllers, microcontrollers, and silicon roots of trust. It suits experienced firmware engineers with a strong background in platform security, low-level programming, and cross-team technical leadership. Day-to-day tasks include deriving security requirements, implementing root of trust features, and collaborating with various teams to ensure secure system operation.

What you'll do

  • Derive security requirements from business needs and threat modelling
  • Design and deliver root of trust firmware features
  • Own features from architecture through implementation and delivery
  • Implement industry security standards in firmware
  • Lead design and code reviews, improve threat modelling and CI practices

What they're looking for

Essential

  • BS or MS in relevant field or equivalent experience
  • 7+ years software and firmware engineering experience
  • Deep understanding of root of trust security fundamentals
  • Strong low-level programming and SoC access control knowledge
  • Experience with server firmware and automation scripting

Nice to have

  • Open-source root of trust project contributions
  • Experience with post-quantum cryptography
  • Rust firmware experience
  • Secure manufacturing at scale, FIPS 140-3 certification

Core skills

  • Firmware development
  • Root of trust
  • Threat modelling
  • Python
  • SoC access controls
  • Secure boot
  • Attestation
  • CI/CD

Certifications mentioned

  • FIPS 140-3

The shape of the job

Technical depth

5/5

FoundationalSpecialist

Pace

3/5

SteadyFast-moving

Ownership

5/5

GuidedSelf-directed

Teamwork

4/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your experience designing root of trust firmware for data center systems.
  2. 02How do you approach threat modelling for new platform features?
  3. 03Explain a time you led a cross-team technical deliverable without formal authority.
  4. 04What are the main challenges in implementing secure and measured boot in server platforms?

About NVIDIA

NVIDIA develops hardware and software platforms for AI, robotics, and autonomous systems, including data center infrastructure.

Full job descriptionAs published by NVIDIA

NVIDIA's invention of the GPU in 1999 sparked the growth of the PC gaming market, redefined modern computer graphics, and revolutionized parallel computing. GPU deep learning ignited the modern AI era, with NVIDIA hardware and software acting as the foundation for the world's most ambitious AI, robotics, and autonomous systems workloads. Today, we are the AI computing company. NVIDIA Data Center Systems, including DGX, HGX, and MGX platforms, deliver the world's leading infrastructure for AI at scale. We are growing our teams with the most thoughtful, creative, and driven people on the planet.

NVIDIA is searching for a highly motivated and creative senior security firmware engineer to join the Data Center Systems Software team and secure the platform: the baseboard management controllers, microcontrollers, and silicon roots of trust the rest of the platform depends on. You will design and deliver the firmware that proves the integrity of NVIDIA's data center systems from the first instruction out of reset through attestation, update, and recovery in production, and set technical direction for work that spans silicon vendors, platform teams, and industry standards bodies.

What you'll be doing:

  • Derive security requirements for NVIDIA’s data center platforms from business needs and threat modeling.
  • Design and deliver root of trust firmware with features like secure and measured boot, attestation, provisioning of identities and cryptographic material, and secure debug.
  • Own features from architecture to code: make the trade-offs explicit, gain agreement across silicon, platform, security architecture, manufacturing, and partner teams, and deliver the implementation.
  • Implement industry security standards (eg.: SPDM, TCG DICE).
  • Lead design and code reviews, improve threat modeling, testing, CI, and release practices, and make AI agents a normal part of how the team builds firmware.

What we need to see:

  • BS or MS in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent experience.
  • 7+ years of software and firmware engineering experience, or equivalent depth, including products built on a hardware root of trust.
  • Deep understanding of roof of trust security fundamentals: chains of trust, signing and key management, attestation, and anti-rollback.
  • Strong low-level programming skills and a deep understanding of SoC access controls (privilege levels, TrustZone, memory and bus protection).
  • Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language.
  • A record of leading technical work across teams without formal authority, including guiding other engineers on a shared deliverable.
  • Experience with modern AI and agents, including an AI-forward mindset and proactive adoption of new tools and techniques.
  • Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a distributed team.
  • Comfortable with ambiguity and complexity; you make sound decisions quickly with incomplete information and course-correct without friction.

Ways to stand out from the crowd:

  • Contributions to open-source root of trust projects or to industry security standards.
  • Experience building systems with symmetric, asymmetric, and post-quantum cryptography.
  • Rust firmware experience, including bringing Rust into an existing C or C++ codebase.
  • Secure Manufacturing at scale. Security certifications such as FIPS 140-3.
  • Hardware cryptographic accelerators, secure key storage, trusted execution frameworks such as OP-TEE or Keystone, and OpenBMC.

NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us. If you're creative and autonomous, we want to hear from you!

Your base salary will be determined based on your location, experience, and other objective job-related factors. The expected base salary range for this position is 184,000 USD – 287,500 USD.

You will also be eligible for equity and benefits .

Applications for this job will be accepted at least until November 10, 2026.

This posting is for an existing vacancy.

NVIDIA uses AI tools in its recruiting processes.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

  • US, MA, Westford and 2 more

    Conduct research to improve the security, safety, and privacy of AI models and systems, including AI for cybersecurity and secure system design. Requires a recent or upcoming PhD and interest in AI and security.

    Graduate & entry levelAI/MLSystems securityFormal methods
  • US, CA, Remote and 3 more

    Develop, tune, and maintain security detections across multiple platforms, working closely with incident response and threat intelligence teams. Requires experience with detection engineering and security telemetry in enterprise and cloud environments.

    SeniorSplunkMicrosoft SentinelCrowdStrike
  • US, CA, Santa Clara and 5 more

    Define and guide hardware Root of Trust architecture for SoCs and GPUs, collaborate across teams, and ensure platform security requirements are met. Requires 8+ years of relevant experience and expertise in SoC security architecture.

    SeniorASIC designSoC securityCryptography
  • Remote (USA) · $134.2k to $230.8k

    Implement and improve security controls across enterprise systems, automate security checks, and ensure protections remain effective. Requires strong hands-on security engineering experience and ability to automate and integrate controls.

    SeniorPythonGoAPI integrations

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Free beginner roadmap PDF when you join · No spam · Unsubscribe anytime