Senior Firmware Security Architect, Networking

Job Title

Senior Firmware Security Architect, Networking

Role Summary

Senior security architect focused on firmware and embedded subsystems for NVIDIA Networking products. Partner with firmware, hardware, and ASIC architecture teams to define and review security architecture, reduce vulnerabilities, and drive secure features across the device lifecycle.

This role impacts firmware trust, secure boot, device identity, provisioning, attestation, and secure updates for high-scale networking devices.

Experience Level

Senior — requires demonstrated experience (guidance: 5+ years in product security, firmware security, or security research).

Responsibilities

Key responsibilities include designing, analyzing, and guiding implementation of firmware security for networking products.

• Design and review security architecture for firmware: trust boundaries, privilege separation, secure boot/chain of trust, secure update and anti-rollback.
• Perform threat modeling of firmware and embedded subsystems across products.
• Analyze hardware/firmware interactions to identify security weaknesses in boot flows, privileged execution environments, and management interfaces.
• Define security features and mitigations across device lifecycle: provisioning, attestation, debug authorization, runtime hardening, and field updates.
• Translate threat models into actionable security requirements and review designs and implementations for compliance.
• Partner with hardware and ASIC architects to specify required security primitives and usage across product lines.
• Drive secure firmware development practices: memory-safe patterns in C, static analysis, and fuzzing of firmware interfaces.

Requirements

Must-have qualifications and core skills. Candidates missing some items may still be considered if they demonstrate equivalent practical experience in firmware/product security.

• 5+ years of experience in product security, firmware security, or security research with hands-on work in embedded or firmware codebases.
• Experience defining security policy models, including authorization schemes, RBAC, and administrative role separation.
• Familiarity with applied cryptography relevant to firmware: secure boot, code signing, and attestation.
• Proven ability to analyze complex firmware and hardware/firmware interactions and identify mitigations.
• Strong interpersonal and communication skills; able to work independently and collaboratively across teams.

Nice-to-have:

• Experience with hardware/software interfaces in networking devices (registers/MMIO, DMA, PCIe, mailboxes/doorbells).
• Experience with hardware roots of trust and hardware-enforced isolation (MPU/MMU, secure enclaves, fuse/OTP provisioning).
• Hands-on experience with networking software (device drivers, control plane, management interfaces) and data-center scale deployments.

Education Requirements

Academic degree in Computer Science, Electrical Engineering, or a related technical field is preferred; candidates with equivalent practical experience will be considered. Advanced degrees (M.Sc. or PhD) in a relevant technical field are listed as advantageous.

About the Company

Company: NVIDIA

Headquarters: Santa Clara, California, USA

NVIDIA is a global leader in accelerated computing, renowned for its innovative solutions in AI and digital twins that transform diverse industries. The company specializes in networking technologies, providing end-to-end InfiniBand and Ethernet solutions for servers and storage that optimize performance and scalability. NVIDIA serves sectors such as high-performance computing, enterprise data centers, and cloud computing, constantly reinventing its products and services to stay ahead in the market.