Securing NVIDIA's EDA clusters is not a matter of deploying the standard security stack. These workloads are too large, too long-running, and too performance-sensitive for the off-the-shelf playbook to simply apply. That constraint is the job. We're hiring an engineering leader to build and run Infrastructure Security Engineering for EDA Clusters: the team responsible for implementing security controls across the compute, storage, and networking that NVIDIA's hardware engineers design silicon on, spanning on-prem data centers and multi-cloud environments. You'll operate as the peer counterpart to NVIDIA's company-wide security organization and to hardware infrastructure engineering, translating enterprise security intent into controls that hold up at EDA scale without slowing chip design down.
Much of this is a build, not a maintain. You'll have the authority to decide where standard tooling applies, where it actively cannot, and what NVIDIA engineers instead then lead a team to do it. If your depth is in large-scale networking and compute infrastructure at a hyperscaler, a security product company, or anywhere fleets and fabrics are the day job and you've carried real accountability for the security properties of those systems, you are exactly who we want to talk to. We don't expect you to arrive fluent in every security product category; we do expect you to own security outcomes from day one and to acquire the remaining domain breadth fast. Strong infrastructure mastery plus sharp security instincts beats a broad product résumé here. This is a role for someone who believes security engineering is engineering: automation, instrumentation, and secure-by-default infrastructure not tickets, exceptions, and spreadsheets.
What You'll Be Doing:- Build and lead the team. Grow and direct a team of engineers with a bias toward practical, production-proven results, and develop the leaders within it. Own the technical roadmap. Partner with various other security teams and infrastructure engineering to architect the roadmap for EDA-specific security controls and ship them into production.
- Make the network and platform your control plane. Protection doesn't depend just on what's running inside the node.
- Engineer around hard constraints. Determine where conventional endpoint and workload security tooling fits, where it doesn't, and design the alternative: security that protects multi-day compute jobs without degrading them.
- Make enforcement uniform. Drive consistent application of security frameworks across on-prem data centers and multi-cloud platforms where "consistent" means enforced, not documented.
- Run the full lifecycle of core infrastructure security technologies: selection, deployment, operation, and eventual replacement.
- Automate the evidence. Build the KPIs, instrumentation, and audit workflows that make security posture across EDA systems continuously visible treating compliance evidence as an engineering output, not a manual exercise.
- Think like an adversary. Mitigation planning across network, storage, and compute.
- Champion security by design, embedding automation and secure defaults into the infrastructure lifecycle instead of bolting them on afterward.
What We Need To See:- 12+ overall years building and operating production infrastructure at scale - network, compute clusters, and storage including 5+ years leading and managing engineering teams. A Bachelor's degree in a relevant engineering field or equivalent experience.
- Deep networking expertise applied to large compute environments.
- Hands-on depth operating compute fleets at scale - provisioning, lifecycle, and the operational realities of long-running, high-value jobs.
- Deep understanding of hyperscaler methodologies for operating large-scale systems with security and reliability as co-equal goals.
- Experience securing performance-sensitive or high-throughput environments where standard agent-based tooling was constrained and you engineered a workable answer.
- Extensive history of building and guiding engineering teams responsible for complex distributed or multi-cloud architectures.
- Demonstrated ability to drive unified outcomes across organizational boundaries, with partners who do not report to you.
- Exceptional communication skills credible with individual engineers and executive leadership in the same day.
Ways To Stand Out from the Crowd:- Built or operated infrastructure security capabilities at a hyperscaler or a security product company - you've engineered detection and enforcement systems, not just deployed someone else's.
- Experience with kernel- and fabric-level observability and enforcement - eBPF, in-line and out-of-band inspection, DPU/SmartNIC offload - as an alternative to heavyweight in-node agents.
- Track record leading security or platform engineering inside EDA, HPC, or large research-cluster environments. Breadth across security domains - IAM, EDR/XDR, CNAPP, CSPM, vulnerability lifecycle, zero-trust architectures - or a demonstrated pattern of picking up new domains fast.
- Experience driving infrastructure-as-code and policy-as-code so secure configuration is the default state rather than an audited one, plus familiarity translating SOC2 / ISO27001 into real technical controls.
Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 272,000 USD - 431,250 USD for Level 4, and 320,000 USD - 488,750 USD for Level 5.
You will also be eligible for equity and benefits.
Applications for this job will be accepted at least until September 19, 2026.
This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
