Drimva

NVIDIA

Principal Cyber Security Engineer - Agentic Identity and Security

$240K–$380K

US, CA, Santa Clara +1 · Principal · Full-time · Posted Sep 10, 2026

Location
US, CA, Santa Clara
US, Remote
Experience
15+ years; no alternatives stated.
Education
Bachelor’s degree or Master’s degree or equivalent experience in Computer Science or a related field.

About the job

Architects and builds identity and security infrastructure that enables trusted AI agents to operate across NVIDIA’s internal systems and workflows.

What you'll do

  • Build and iterate on agent identity security features, prototypes, and production services across cloud, on-premises, and hybrid environments.
  • Develop reusable tools, APIs, and integration patterns for secure agent identity, and guide related architecture and engineering standards.
  • Collaborate with security, AI, product, and platform teams; assess relevant standards, open-source technologies, and vendor capabilities.

What they ask for

  • Bachelor’s or Master’s degree or equivalent experience in Computer Science or a related field.
  • 15+ years in software engineering, security engineering, identity, distributed systems, or related areas, including significant hands-on technical leadership.
  • Experience in offensive security, adversarial thinking, red teaming, or attack-path analysis; and with device trust, endpoint posture, or hardware-backed trust signals.
  • Hands-on experience with container technologies, network infrastructure, and cloud service provider environments; understanding of identity and access concepts such as OAuth 2.0/2.1, OIDC, SCIM, mTLS, SPIFFE, MCP, and AuthZen.

Nice to have

  • Experience with agentic or AI-adjacent systems.
  • Familiarity with AI-specific security risks, including prompt injection, tool misuse, data exfiltration, and unsafe delegation.

Pay

240,000 USD - 379,500 USD (base salary)

Tools

Docker, containerd, AWS, Azure, GCP, OAuth 2.0/2.1, OIDC, SCIM

AI focus

Build identity and security capabilities for AI agents, including credential brokering, token exchange, delegation, workload identity, and lifecycle management.

Model-written summary · the original posting is authoritative

First seen Oct 15, 2026 · Last verified Nov 5, 2026 (UTC)