Senior Cybersecurity Engineer - Identity Platform and Access Management

NVIDIA's Enterprise Security organization is looking for a Senior Cybersecurity Engineer – Identity Platform & Access Management to lead the development, deployment, and improvement of large‑scale identity and access management systems. You will establish and guide the identity framework that safeguards developers, services, and AI agents across NVIDIA's worldwide infrastructure, including cloud, on‑premises, and managed device settings. What You'll Be Doing Lead enterprise identity strategy and platform architecture, encompassing cloud identity, directory services, and the transition of applications to modern authentication standards (OAuth2.0, OIDC, SAML). Define and implement reference architectures for secure authentication across CLI, browser, and agentic workflows. Architect and stand up a centralized token issuance and validation service for developer and CLI workflows, ensuring consistent trust and verification across device and session contexts. Establish agent identities as an outstanding element within the identity platform, enabling robust access control and audit‑ability for automated and machine‑assisted workflows. Build and implement advanced identity security controls such as Conditional Access policies, Privileged Identity Management (PIM), and risk‑based authentication. Scale device management and identity governance systems to meet the rapidly growing demands of AI‑powered operations, ensuring reliability, performance, and compliance across large organizational environments. Partner with multi‑functional collaborators across security, infrastructure, and product teams to align on architecture, build strategy, and operational ownership. What We Need to See Bachelor's or Master's degree (or equivalent) in Computer Science or a related field. Over 12+years of experience in platform or infrastructure engineering, with extensive knowledge in authentication, authorization, and identity systems including modern token‑based protocols, federated identity standards, and device attestation. Demonstrable experience crafting and leading identity or access management platforms within large‑scale organizations. Solid understanding of Zero Trust architecture, identity‑based attack techniques, and modern IAM controls. Experience securing automated or computer‑controlled workflows, including service‑to‑service identity and non‑human access patterns. Excellent written and verbal communication skills; comfortable driving architecture decisions across senior and executive audiences. Ways to Stand Out from the Crowd Established background in building token services or centralized auth platforms that run at enterprise scale with high availability and low latency. Deep understanding of delegated access flows, managed device trust models, and the nuances of securing both human and non‑human identities. Demonstrated ability to establish agent or service identities as an outstanding construct in complex, multi‑tenant environments. Hands‑on application development experience with the ability to contribute directly to auth libraries and SDKs. Experience leading enterprise identity transformations or directory modernization programs, including migration from legacy authentication protocols at scale. This role offers the opportunity to influence strategy, lead modernization, engage with executives, and leave a lasting security impact while working alongside outstanding engineers and security leaders. Salary & Benefits: Base salary will be determined based on location, experience, and market comparables. The base salary range is $196,000–$310,500 USD. You will also be eligible for equity and benefits. Applications will be accepted at least until April24,2026. NVIDIA is committed to fostering a diverse work environment and is an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status, or any other characteristic protected by law. #J-18808-Ljbffr