Senior Firmware Security Architect, Networking
NVIDIAJob Title
Senior Firmware Security Architect, Networking
Role Summary
Join NVIDIA Networking product security to define and drive firmware security architecture across networking products. The role partners with firmware, hardware, and architecture teams to reduce risk, mitigate vulnerabilities, and deliver secure firmware features at scale.
This is a hands-on technical architect position focused on threat modeling, secure boot and update flows, device identity, privilege separation, and guiding engineering teams through secure implementations.
Experience Level
Senior - requires substantial experience; this role requests 8+ years in product security, firmware security, or security research with hands-on embedded/firmware work.
Responsibilities
Key responsibilities include:
- Design and review firmware security architecture: trust boundaries, privilege separation, device identity, key storage, secure boot, and secure update/anti-rollback.
- Perform threat modeling for firmware and embedded subsystems across products.
- Analyze hardware/firmware interactions to identify weaknesses in boot flows, privileged execution environments, and management interfaces.
- Define security features and mitigations across the device lifecycle: provisioning, attestation, debug authorization, runtime hardening, and field updates.
- Translate threat models into actionable security requirements and validate designs and implementations against them.
- Specify required hardware security primitives with ASIC and hardware architects and define their usage across product lines.
- Drive secure firmware development practices: memory-safe patterns, static analysis, and fuzzing of firmware interfaces.
Requirements
Must-have qualifications and skills:
- 8+ years of experience in product security, firmware security, or security research with hands-on work on embedded or firmware codebases.
- Practical experience defining and implementing security policy models (authorization schemes, RBAC, administrative role separation).
- Familiarity with applied cryptography relevant to firmware: secure boot, code signing, and attestation.
- Experience with threat modeling, common attack vectors on firmware, and mitigation techniques.
- Strong analytical skills for assessing hardware/firmware interactions and root causes of vulnerabilities.
- Ability to work independently and collaboratively in a fast-evolving environment; strong communication and interpersonal skills.
Nice-to-have:
- M.Sc. or PhD in a technical field (see Education Requirements).
- Experience with hardware/software interfaces in networking devices (MMIO, DMA, mailbox/doorbell, PCIe) and related firmware.
- Experience with hardware roots of trust and hardware-enforced isolation (MPU/MMU, secure enclaves, fuse/OTP provisioning) in SoCs or ASICs.
- Hands-on experience with networking software (device drivers, control plane, management interfaces) and data center deployment/security operations.
Education Requirements
Academic degree expected: Bachelor's in Computer Science, Electrical Engineering, or a related technical field, or equivalent practical experience. Preferred qualifications mention M.Sc. or PhD in Computer Science, Electrical Engineering, or related technical fields.
About the Company
Company: NVIDIA
Headquarters: Santa Clara, California, USA
NVIDIA is a global leader in accelerated computing, renowned for its innovative solutions in AI and digital twins that transform diverse industries. The company specializes in networking technologies, providing end-to-end InfiniBand and Ethernet solutions for servers and storage that optimize performance and scalability. NVIDIA serves sectors such as high-performance computing, enterprise data centers, and cloud computing, constantly reinventing its products and services to stay ahead in the market.
