System Software Engineer - Secure Cryptographic Services

NVIDIA NVIDIA · Semiconductors · Santa Clara, CA +4 · Remote

System Software Engineer focused on cryptographic key management and software supply chain security for NVIDIA's AI workloads and model artifacts. The role involves architecting and implementing cloud-agnostic signing and PKI infrastructure, defining next-generation key management strategies including PQC, and engineering cryptographic ceremonies for software and AI model provenance.

What you'd actually do

  1. Architect and drive the enterprise-wide strategy for cryptographic integrity and software supply chain security, partnering with CPU, GPU, and NBU leaders to unify security standards across NVIDIA's diverse hardware and software ecosystems.
  2. Own and build the implementation of a cloud-agnostic, hyper-scale signing and PKI infrastructure, using hybrid architectures (private cloud + AWS/Azure) to support the explosive growth of NVIDIA’s AI workloads and model provenance.
  3. Define the architectural vision and governance for next-generation key management, including Post-Quantum Cryptography (PQC) readiness and automated, ephemeral credential rotation backed by HSM roots of trust.
  4. Engineer high-assurance cryptographic ceremonies and verifiable transparency logs (integrating patterns like Sigstore), establishing a tamper-evident chain of custody for all NVIDIA software, firmware, and AI model artifacts.
  5. Transform the internal developer experience by architecting self-service, globally distributed security platforms that abstract complexity, solving reliability and scalability challenges to deliver "secure cryptography as a platform" for thousands of engineers

Skills

Required

  • BS or MS in Computer Science Engineering or a related field of study (or equivalent experience).
  • 5+ years of experience in crafting, and implementing software engineering cryptographic automation and solutions.
  • Solid understanding of cryptographic algorithms, such as key management, hashing, signing, and certificate creation.
  • Familiarity with AuthN/AuthZ concepts and frameworks for securing production and corporate access, including SSO, SAML Federated Identity, RBAC, and IAM policies.
  • 12+ years of experience with Python, Java or .NET programming languages
  • Prior experience developing Cryptographic applications in a chip company and PKI software systems.

Nice to have

  • Knowledge of AWS cloud platform (or other CSPs), with experience architecting high-throughput services.
  • Technical leadership of cryptographic key & certificate management, and signing infrastructure, platform, or software systems.
  • Proficiency in Java, Python, Go and .NET programming is a plus.
  • Experience with threat modeling using tools such as Microsoft Threat Modeling Tool.
  • Background with Google Cloud Platform (GCP), Microsoft Azure, and Oracle Cloud Infrastructure (OCI).

What the JD emphasized

  • cryptographic integrity
  • software supply chain security
  • cloud-agnostic
  • hyper-scale signing and PKI infrastructure
  • next-generation key management
  • Post-Quantum Cryptography (PQC) readiness
  • automated, ephemeral credential rotation
  • high-assurance cryptographic ceremonies
  • verifiable transparency logs
  • tamper-evident chain of custody
  • AI model artifacts
  • self-service, globally distributed security platforms
  • secure cryptography as a platform