Distinguished Engineer, Security Architecture - DGX Cloud

NVIDIA DGX Cloud is an AI Factory designed to power the next generation of AI and industrial-scale breakthroughs. As the Distinguished Engineer for Security Architecture, within our Security Engineering organization, you will set the security design bar for an AI factory of hundreds of thousands of GPUs, and then build against it alongside the teams. This is the founding architecture seat in a new organization. Security Engineering is a new organization at DGX Cloud, accountable for the security outcome of the platform, and this is the architecture function inside it. You will define the security design standard for DGX Cloud, a bar that sits above the company floor, and hold it from inside the teams doing the building.

Security here is fleet horizontal and stack vertical, so your scope runs from the hardware root of trust and the hardened baseline, through tenancy and GPU workload isolation, to the services and APIs built on top, across every DGX Cloud engineering organization. A small team of Principal Engineers will report to you and hold the bar at domain depth. This is still a hands-on seat, and you stay in the design with them. You will also serve as DGX Cloud's technical interface into NVIDIA's central security organization. There is no architecture review board here and no approval queue; the bar holds because the strongest security engineers in the room helped set it and helped ship it.

What You Will Be Doing:
-
Set the DGX Cloud Security Bar: Own the security design standard across DGX Cloud (tenancy, GPU workloads, identity, supply chain, and isolation) and make it concrete. Reference architectures, golden paths, and requirements engineers can actually build against, not a policy library.

-
Hold the Bar by Building: Embed with engineering teams on real work: join the design, learn the code, help ship the thing rather than grade it afterward. The posture is not "you did this wrong." It is "here are the considerations we need to meet, I will help, let's go to work."

-
Architect the Security Platform: Drive the multi-year architecture for the common security infrastructure the fleet runs on: hardened baselines and patch SLOs, deploy-time policy and admission control, workload identity, supply-chain provenance through signing and attestation, and detection and response tuned to GPU workloads.

-
Engineer Classes of Risk Out of Existence: Finding a vulnerability is 4% of the work; building the system where it cannot happen again is the other 96%. You will attack recurring risk at its architectural root, including offensively against our own designs, and feed what you find back into the paved roads, the baselines, and the detections.

-
Grow the Principal Engineering Bench: Lead a small team of Principal Engineers who report to you and hold the bar across domains. Set their technical direction, hire into the gaps, and grow each of them into deeper scope than they arrived with.

-
Multi-Functional Collaboration: Serve as DGX Cloud's primary technical connection into NVIDIA's central security organization, and partner across platform, production engineering, and network security teams. We operate horizontally across vertically organized teams, with influence rather than authority.

-
Communicate Risk Upward: When something is going to ship below the bar, write down the gap and what closing it would take, and put it in front of the executives who hold the risk pen. We do not block releases ourselves and we do not quietly absorb risk. The bar holds because gaps become visible and owned.

What We Need to See:
-
Security Engineering: Experience (typically 20+ years) across software engineering, infrastructure, and security, with recent depth securing large-scale distributed or cloud platforms. You build systemic solutions rather than performing manual operations or "tool administration."

-
Architecture at Fleet Scale: A proven record owning the security architecture of a large platform end to end,