What You'll Be Doing
Build and implement network protection frameworks, including firewalls, intrusion detection/prevention systems, VPNs and other security technologies.
Partner with Enterprise Security — working across IAM, network access control (NAC/802.1X), and Zero Trust identity/posture-based policy so that network access decisions are increasingly driven by who/what is connecting and its security posture, not just IP/VLAN placement.
Partner with Product Security (ProdSec) to enable NVIDIA's own security products and tooling for internal customers at scale — taking platforms validated in staging/pilot and driving them into org-wide production use (e.g., artifact/supply-chain scanning gates, access-control gateways, endpoint/network detection tooling), removing the friction that keeps good tooling stuck at "validated but not embraced."
Design network-level isolation for autonomous/agentic AI workloads ("autorun") and multi-tenant environments running disparate, co-located workloads at different trust levels — defining trust-domain boundaries, segmentation models, and long-term end-state architecture (e.g., firewall-based "chambers" today, migrating toward DPU-based zero-trust micro-segmentation as that capability matures) so that a compromised or malicious workload cannot reach other tenants or the broader corporate network.
Lead efforts to move NVIDIA's internal office and lab networks from a largely flat, implicitly-trusted model toward explicit east-west segmentation — internal/collapsed firewalls at key boundary points, a service-catalog-based access model, and a foundation for dynamic Zero Trust controls (posture, identity, application awareness) — without breaking existing lab/office workflows.
Research, evaluate, and recommend security solutions, products, and technologies that can enhance the network's security posture.
Partner and conduct security audits and penetration tests to assess the network's security and identify vulnerabilities.
Create and maintain documentation, including security policies, procedures, network diagrams, and multi-functional feasibility reviews that define clear ownership boundaries between network, identity, platform, and application-security teams.
Deliver guidelines, validated design standards, and direction on security standards/policies/roadmaps like Zero Trust to ensure consistent security practices across the organization. Provide domain expertise, consultation, and critical issue support.
What we need to see
MS or PhD in Electrical Engineering, Computer Science, Computer Engineering, Artificial Intelligence, Data Science, Mathematics, Statistics, or equivalent experience.
12+ years of experience in building, managing and supporting large scale hybrid networks on the foundations of security.
Experience developing automation technology with Python, Ruby, Go or other languages used in infrastructure automation.
Advanced knowledge of NIST CSF, CIS controls, or MITRE ATT&CK frameworks.
Strong knowledge of networking protocols and encryption services and how these serve elevated security posture for a network.
Experience evaluating and testing new vendor platforms and in-house network initiatives for security issues.
Knowledge of cloud platforms like AWS, Azure, or Google Cloud, and their respective security practices and services.
Experience working cross-functionally with identity/IAM and product security teams to turn security capabilities into org-wide standards, not just point solutions.
Comfort operating in ambiguity on emerging problem spaces — including securing AI agent platforms where standards and precedent are still being written.
Ways To Stand Out From The Crowd
Experience with ML/AI as it relates to security analysis, vulnerability assessment and detection, threat modeling, malware detection, binary analysis, network analytics or other security-related research.
Experience working with heterogeneous security platforms and building them as code.
Experience driving org-wide adoption of a security standard or gate (e.g., getting a scanning/enforcement tool out of staging and into default production use across many teams).
Direct experience securing agentic AI / autonomous coding-agent infrastructure — sandboxing, egress control, and trust-domain isolation for workloads that complete AI-generated code with minimal human oversight.
Experience crafting segmentation for large-scale flat corporate and campus networks using internal firewalls, VLANs/VRFs, and NAC. You have a track record of gaining multi-functional sign-off and making the handoff operational, not just crafting it.
NVIDIA is leading the way in groundbreaking developments in Artificial Intelligence, High-Performance Computing and Visualization. The GPU, our invention, serves as the visual cortex of modern computers and is at the heart of our products and services. Our work opens up new universes to explore, enables outstanding creativity and discovery, and powers what were once science fiction inventions from artificial intelligence to autonomous cars. NVIDIA is looking for exceptional people like you to help us accelerate the next wave of artificial intelligence.
- Your base salary will be determined based on your location, experience, and other objective job-related factors. The expected base salary ranges for this position are:
- 196,000 USD – 310,500 USD for Level 5; and 240,000 USD – 379,500 USD for Level 6.
You will also be eligible for equity and benefits.
Applications for this job will be accepted at least until November 3, 2026.
This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.
