Principal Cyber Security Engineer - Agentic Identity and Security
$240k - $380k • Remote • US, CA, Santa Clara
Posted 1mo ago
About the job
NVIDIA is seeking a Principal Engineer to define and build core agentic identity capabilities that enable trusted AI agents across the company's internal ecosystem. This hands-on role involves translating complex problems into practical designs, prototyping solutions, and collaborating across identity, security, platform, and application teams to bring infrastructure into production. The goal is to evolve identity and security controls, originally designed for human users, to safely and reliably support non-human and agent-driven workflows as AI agents access tools, call APIs, and perform multi-step operations.
Responsibilities
- Architect and build agent identity security features for various environments, applying relevant standards and prototyping innovative solutions for credential brokering, token exchange, delegation, workload identity, and lifecycle management.
- Identify high-value MVPs for security and identity problems, prototype solutions, validate with partners, and iterate towards production-ready services.
- Develop reusable skills, CLI tools, APIs, and integration patterns to promote secure agent identity adoption across enterprise tools.
- Collaborate with Enterprise Security, Product Security, Enterprise AI, and platform teams to align architecture with workflow needs and operational constraints.
- Contribute to architectural direction, reviews, and engineering standards for agentic identity and security infrastructure.
- Evaluate emerging standards, open-source technologies, and vendor capabilities in agentic identity, translating findings into internal builds and roadmap recommendations.
Requirements
- Bachelor's or Master's degree in Computer Science or equivalent experience.
- 15+ years in software engineering, security engineering, identity, or distributed systems, with significant technical leadership.
- Proven ability to frame complex problems, define MVPs, prototype quickly, and evolve ideas into production systems.
- Strong software engineering skills in backend services, APIs, automation, or platform components, with the ability to learn new technologies rapidly.
- Experience in offensive security, adversarial thinking, red teaming, or attack-path analysis.
- Experience with device trust, endpoint posture, or hardware-backed trust signals and their impact on access decisions.
- Ability to collaborate across organizational boundaries, balance security with usability, and drive pragmatic outcomes.
- Hands-on experience with container technologies (Docker, containerd), network infrastructure (proxies, routing, firewalls, VPNs), and cloud environments (AWS, Azure, GCP).
- Good understanding of identity and access concepts like OAuth 2.0/2.1, OIDC, SCIM, mTLS, SPIFFE, MCP, AuthZen, certificate lifecycle management, and secrets management.
Benefits
- Equity
- Benefits