Full Job Description
NVIDIA is searching for a highly motivated and creative senior security firmware engineer to join the Data Center Systems Software team and secure the platform: the baseboard management controllers, microcontrollers, and silicon roots of trust the rest of the platform depends on. You will design and deliver the firmware that proves the integrity of NVIDIA's data center systems from the first instruction out of reset through attestation, update, and recovery in production, and set technical direction for work that spans silicon vendors, platform teams, and industry standards bodies.
What you'll be doing:
• Derive security requirements for NVIDIA’s data center platforms from business needs and threat modeling.
• Design and deliver root of trust firmware with features like secure and measured boot, attestation, provisioning of identities and cryptographic material, and secure debug.
• Own features from architecture to code: make the trade-offs explicit, gain agreement across silicon, platform, security architecture, manufacturing, and partner teams, and deliver the implementation.
• Implement industry security standards (eg.: SPDM, TCG DICE).
• Lead design and code reviews, improve threat modeling, testing, CI, and release practices, and make AI agents a normal part of how the team builds firmware.
What we need to see:
• BS or MS in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent experience.
• 7+ years of software and firmware engineering experience, or equivalent depth, including products built on a hardware root of trust.
• Deep understanding of roof of trust security fundamentals: chains of trust, signing and key management, attestation, and anti-rollback.
• Strong low-level programming skills and a deep understanding of SoC access controls (privilege levels, TrustZone, memory and bus protection).
• Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language.
• A record of leading technical work across teams without formal authority, including guiding other engineers on a shared deliverable.
• Experience with modern AI and agents, including an AI-forward mindset and proactive adoption of new tools and techniques.
• Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a distributed team.
• Comfortable with ambiguity and complexity; you make sound decisions quickly with incomplete information and course-correct without friction.
Ways to stand out from the crowd:
• Contributions to open-source root of trust projects or to industry security standards.
• Experience building systems with symmetric, asymmetric, and post-quantum cryptography.
• Rust firmware experience, including bringing Rust into an existing C or C++ codebase.
• Secure Manufacturing at scale. Security certifications such as FIPS 140-3.
• Hardware cryptographic accelerators, secure key storage, trusted execution frameworks such as OP-TEE or Keystone, and OpenBMC.
Your base salary will be determined based on your location, experience, and other objective job-related factors. The expected base salary range for this position is 184,000 USD – 287,500 USD.
You will also be eligible for equity and .
Applications for this job will be accepted at least until November 10, 2026.
This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
