Senior Systems Software Security Engineer – Data Center Systems

📋 Description

• • Join NVIDIA, a global leader at the forefront of artificial intelligence, high-performance computing, and visualization, as a Senior Systems Software Security Engineer specializing in Data Center Systems. In this pivotal role, you will be instrumental in fortifying the security posture of NVIDIA’s cutting-edge data center infrastructure, ensuring the integrity and trustworthiness of our advanced computing solutions.
• • Your primary responsibility will be to conceptualize, design, and implement robust security features that are critical for the success and continued innovation within NVIDIA’s Data Center business. This involves a deep dive into the intricate security requirements of modern AI-driven data centers, with a particular emphasis on establishing and maintaining a strong Root of Trust (RoT) throughout the system lifecycle.
• • You will be tasked with developing and delivering innovative security solutions focused on key areas such as secure boot processes, system attestation mechanisms, resilient recovery strategies, secure Out-of-Band management, protected debug functionalities, and the overall security of firmware development. This requires a comprehensive understanding of the entire system, from hardware initialization to operating system and application layers.
• • A significant part of your role will involve close collaboration with various NVIDIA internal teams, including hardware engineering, software development, and product management, as well as external partners. This cross-functional engagement is essential to drive the seamless implementation, integration, and widespread deployment of security features and systems across our diverse product portfolio.
• • You will be expected to design and develop highly optimized security solutions, adhering to and often advancing industry-leading standards and protocols. This includes, but is not limited to, expertise in areas like OpenBMC for baseboard management, UEFI for system firmware, TCG DICE for device identity composition and attestation, SPDM (Security Protocol and Data Model) and PLDM (Platform Level Data Model) for platform management and security, Redfish for server management, and adherence to critical security guidelines such as NIST SP800-193 (Platform Firmware Resiliency) and CNSA 2.0 (Committee on National Security Systems Advisory Council).
• • This role demands a proactive approach to identifying potential security vulnerabilities and developing preemptive measures. You will engage in activities such as threat modeling to anticipate risks, rigorous unit testing to ensure code quality and security, contributing to incident response planning, conducting thorough code audits, and integrating security best practices into Continuous Integration/Continuous Deployment (CI/CD) pipelines.
• • Leverage your expertise in system programming and scripting languages, particularly Python, to automate security tasks, develop testing frameworks, and build robust security tools. Your proficiency in these areas will be crucial for efficient development and maintenance of security solutions.
• • You will work with modern server architectures, gaining deep insights into their components and interdependencies. Understanding the nuances of enterprise-grade server hardware and its security implications is paramount.
• • Effective communication is key. You will need to articulate complex technical security concepts clearly and concisely, both in written and verbal forms, to a variety of audiences, including technical peers, management, and potentially external stakeholders, regardless of the issue's complexity.
• • Collaboration is central to success in this remote role. You will work closely with a distributed team of talented engineers, contributing to shared goals and collectively overcoming complex technical challenges. The ability to foster a collaborative environment and build strong working relationships remotely is essential.
• • You will contribute to the end-to-end delivery of high-end enterprise servers, from the initial definition and design phases through to customer deployment. This holistic view ensures that security is embedded throughout the product lifecycle, not as an afterthought, but as a foundational element.
• • This position offers a unique opportunity to shape the future of data center security at NVIDIA, impacting the performance, reliability, and trustworthiness of systems powering the world's most demanding AI and HPC workloads. You will be at the cutting edge of technology, working with state-of-the-art hardware and software, and contributing to innovations that define the industry.