Senior Firmware Security Architect – Networking

About the role

NVIDIA’s Networking product security team is seeking a senior technical security architect to shape the security architecture of its networking firmware. You will work closely with firmware, hardware, and system architecture teams to reduce risk, mitigate threats, and embed new security features across millions of devices worldwide.

Key responsibilities

• Define and evolve the security architecture for networking firmware, including trust boundaries, privilege separation, device identity, secure boot, chain of trust, and anti‑rollback mechanisms.
• Perform threat modeling and security analysis of firmware and embedded subsystems, identifying weaknesses in boot flows, privileged execution environments, and management interfaces.
• Specify security features across the device lifecycle—provisioning, attestation, debug authorization, runtime hardening, and secure field updates.
• Translate threat models into concrete security requirements, review designs, and guide implementation teams.
• Collaborate with hardware and ASIC architects to define required security primitives and their usage.
• Promote secure development practices such as memory‑safe C coding, static analysis, and fuzzing of firmware interfaces.

Required profile

• Academic degree in Computer Science, Electrical Engineering or related field (or equivalent experience).
• 5+ years of product or firmware security experience, including hands‑on work with embedded codebases.
• Proven experience defining security policy models (authorization schemes, RBAC, admin role separation).
• Strong understanding of applied cryptography, secure boot, code signing, and attestation.
• Ability to work independently and collaboratively in a fast‑changing environment.
• Excellent communication and interpersonal skills.

Required skills

• Secure firmware development in C with memory‑safe coding patterns.
• Static analysis and fuzzing of firmware‑exposed interfaces.
• Threat modeling and mitigation of common attack vectors.
• Applied cryptography: secure boot, code signing, attestation.
• Security policy design: RBAC, authorization schemes, role separation.
• Hardware/software interface programming: registers, MMIO, DMA, mailbox, doorbell, PCIe configuration.
• Hardware roots of trust and isolation: MPU, MMU, secure enclaves, fuse/OTP.