System Software Engineer - Secure Cryptographic Services

NVIDIA NVIDIA · Semiconductors · Pune, India +1

System Software Engineer focused on cryptographic integrity and software supply chain security, architecting and implementing cloud-agnostic PKI infrastructure to support NVIDIA's AI workloads and model provenance. The role involves defining vision for key management, engineering cryptographic ceremonies, and transforming developer experience with self-service security platforms.

What you'd actually do

  1. Architect and drive the enterprise-wide strategy for cryptographic integrity and software supply chain security, partnering with CPU, GPU, and NBU leaders to unify security standards across NVIDIA's diverse hardware and software ecosystems.
  2. Own and build the implementation of a cloud-agnostic, hyper-scale signing and PKI infrastructure, using hybrid architectures (private cloud + AWS/Azure) to support the explosive growth of NVIDIA’s AI workloads and model provenance.
  3. Define the architectural vision and governance for next-generation key management, including Post-Quantum Cryptography (PQC) readiness and automated, ephemeral credential rotation backed by HSM roots of trust.
  4. Engineer high-assurance cryptographic ceremonies and verifiable transparency logs (integrating patterns like Sigstore), establishing a tamper-evident chain of custody for all NVIDIA software, firmware, and AI model artifacts.
  5. Transform the internal developer experience by architecting self-service, globally distributed security platforms that abstract complexity, solving reliability and scalability challenges to deliver "secure cryptography as a platform" for thousands of engineers

Skills

Required

  • BS or MS in Computer Science Engineering or a related field of study (or equivalent experience)
  • 10 + years of experience in crafting, and implementing software engineering cryptographic automation and solutions
  • Solid understanding of cryptographic algorithms, such as key management, hashing, signing, and certificate creation
  • Familiarity with AuthN/AuthZ concepts and frameworks for securing production and corporate access, including SSO, SAML Federated Identity, RBAC, and IAM policies
  • Strong grasp of Python, Java or .NET programming languages, accompanied by experience
  • Prior experience developing Cryptographic applications in a chip company and PKI software systems

Nice to have

  • Knowledge and of the AWS cloud platform (or other CSPs), with experience architecting high-throughput services
  • Technical leadership of cryptographic key & certificate management, and signing infrastructure, platform, or software systems
  • Proficiency in Java, Python, Go and .NET programming
  • Experience with threat modeling using tools such as Microsoft Threat Modeling Tool
  • Experience with infrastructure and orchestration tools (Kubernetes, Terraform, GitOps, etc.) as well as background with Google Cloud Platform (GCP), Microsoft Azure, and Oracle Cloud Infrastructure (OCI)

What the JD emphasized

  • cryptographic integrity
  • software supply chain security
  • cloud-agnostic
  • hyper-scale signing and PKI infrastructure
  • AI workloads
  • model provenance
  • key management
  • Post-Quantum Cryptography (PQC)
  • cryptographic ceremonies
  • transparency logs
  • AI model artifacts
  • self-service
  • globally distributed security platforms
  • secure cryptography as a platform