NVIDIA
Principal Cyber Security Engineer - Agentic Identity and Security
$240K–$380K
US, CA, Santa Clara +1 · Principal · Full-time · Posted Sep 10, 2026
- Location
- US, CA, Santa Clara
US, Remote - Experience
- 15+ years; no alternatives stated.
- Education
- Bachelor’s degree or Master’s degree or equivalent experience in Computer Science or a related field.
About the job
Architects and builds identity and security infrastructure that enables trusted AI agents to operate across NVIDIA’s internal systems and workflows.
What you'll do
- Build and iterate on agent identity security features, prototypes, and production services across cloud, on-premises, and hybrid environments.
- Develop reusable tools, APIs, and integration patterns for secure agent identity, and guide related architecture and engineering standards.
- Collaborate with security, AI, product, and platform teams; assess relevant standards, open-source technologies, and vendor capabilities.
What they ask for
- Bachelor’s or Master’s degree or equivalent experience in Computer Science or a related field.
- 15+ years in software engineering, security engineering, identity, distributed systems, or related areas, including significant hands-on technical leadership.
- Experience in offensive security, adversarial thinking, red teaming, or attack-path analysis; and with device trust, endpoint posture, or hardware-backed trust signals.
- Hands-on experience with container technologies, network infrastructure, and cloud service provider environments; understanding of identity and access concepts such as OAuth 2.0/2.1, OIDC, SCIM, mTLS, SPIFFE, MCP, and AuthZen.
Nice to have
- Experience with agentic or AI-adjacent systems.
- Familiarity with AI-specific security risks, including prompt injection, tool misuse, data exfiltration, and unsafe delegation.
Pay
240,000 USD - 379,500 USD (base salary)
Tools
Docker, containerd, AWS, Azure, GCP, OAuth 2.0/2.1, OIDC, SCIM
AI focus
Build identity and security capabilities for AI agents, including credential brokering, token exchange, delegation, workload identity, and lifecycle management.
Model-written summary · the original posting is authoritative