Senior Software Engineer, Agent Policy Fabric

The Agentic Safety Engineering team is building Agent Policy Fabric (APF), an enterprise governance layer for AI agents. APF combines signed policy, runtime verification, policy projection, credential mediation, and audit records to help govern the actions agents take across enterprise systems. We are looking for a Senior Software Engineer to help turn the APF proof of concept into diligent production software. You will build, implement, test, and operate features in policy verification, runtime integration, or conformance testing. Working with experienced platform and security engineers, you will own a defined feature or subsystem and help ensure that policy decisions are accurate, integrations are reliable, and failures are handled safely!Join us!What You'll Be Doing:Build policy-verification features: Implement components of the Runtime Policy Verifier and authorization APIs, including signed policy validation, freshness and revocation checks, rollback protection, and binding decisions to the correct subject and runtime context, following reviewed security contracts.Implement policy projection: Translate canonical APF policy into runtime-specific rules and adapter constraints. Handle unsupported policies and partial updates safely so runtimes admit work only when the required policy has been accepted.Develop runtime integrations: Work with OpenShell and other runtime engineers to implement and test agreed interfaces for policy consumption, runtime context, admission decisions, and audit events. Document interface behavior and raise gaps or conflicting assumptions for resolution.Strengthen correctness and conformance: Build fixtures, compatibility tests, negative tests, and property or fuzz tests that exercise policy behavior, integration boundaries, and failure paths. Investigate defects and turn findings into regression coverage.Deliver production-ready components: Add observability, measure performance, debug reliability issues, and contribute to rollout plans and operational documentation for the components you own.Contribute technical judgment: Write focused design documents, explain implementation tradeoffs, participate in code and security reviews, and work with platform, Identity, and Product Security partners to resolve issues within your scope.Help the team deliver: Break work into achievable turning points, communicate dependencies and risks, review code, and share knowledge with other engineers.What We Need To See:Bachelor's degree or equivalent experience, with 5+ years of relevant industry experience in systems software, backend services, distributed systems, security engineering, or policy infrastructure.Strong programming skills in at least one of Rust, Go, C++, or Python, with experience delivering maintainable, tested production code.Experience building and delivering services or systems components, including API design, integration, debugging, and error handling.Practical experience implementing security controls, such as authorization checks, signature verification, or credential handling, and the ability to reason about trust boundaries and safe failure behavior.Working knowledge of Linux, service-to-service interfaces, automated testing, CI, and software release workflows.Ability to own engineering work through design, implementation, validation, and delivery; communicate technical tradeoffs clearly; and collaborate effectively through design and code reviews.Ways to Stand Out from the Crowd:Experience with policy engines or authorization systems such as OPA/Rego, Cedar, Zanzibar-style systems, or runtime enforcement frameworks.Experience with signed artifacts, trust-root distribution, key rotation, revocation, or tools such as Sigstore, TUF, or in-toto.Familiarity with AI-agent runtimes, sandboxed execution, tool-call governance, MCP-style routing, or credential isolation.Experience with protobuf/gRPC, schema evolution, backward-compatible APIs, or cloud and enterprise deployment environments.Use of property testing, fuzzing, or other adversarial testing techniques to find security and correctness defects.Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 152,000 USD - 241,500 USD for Level 3, and 184,000 USD - 287,500 USD for Level 4.You will also be eligible for equity and benefits.Applications for this job will be accepted at least until October 25, 2026.This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes.NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.SummaryLocation: US, CA, Santa Clara; US, CA, RemoteType: Full time