Senior Software Engineer, Attestation Services - DGX Cloud

Job description

As part of DGX Cloud, the Attestation & Trust Services team builds NVIDIA's trust layer for Confidential Compute and next-generation GPU platforms. We help customers and NVIDIA teams verify the integrity and security posture of GPUs, firmware, and platform components before sensitive workloads run or data is trusted. In this role, you will build production Attestation Cloud Services, verifiers, SDK/CLI integrations, APIs, and customer-hosted trust capabilities. The challenge is high-consequence correctness and dependable operation rather than raw traffic scale. We want hands-on engineers with strong systems fundamentals, production experience, and genuine curiosity about security; prior attestation experience is not required. If foundational trust services with company-wide impact excite you, we'd love to have you join us. What you will be doing: Build and maintain components across the Attestation Cloud platform, verification flows, software development kits and command-line tools integrations, and customer-hosted capabilities, including enablement for new NVIDIA devices and platform generations. Own well-scoped projects end to end, turning incomplete requirements into a clear design, maintainable code, automated tests, a safe rollout, useful telemetry, and durable production support. Improve reliability and security in the components you own, including dependency failures, retries, idempotency, caching, data stores, authentication, revocation freshness, compatibility, graceful degradation, and release validation. Write the test fixtures, conformance tooling, and automation that keep local and remote verification behavior consistent and catch regressions before customers do. Drive root-cause analysis for issues in your features and subsystems using logs, traces, telemetry, and targeted experiments, working with senior engineers on problems that span multiple systems. Participate in design and code reviews, document what you build, and grow into mentoring newer engineers on the team. Participate in the team's rotating on-call schedule and follow incidents through to lasting fixes. What we need to see: BS or MS in Computer Science, Computer Engineering, Information Security, or a related technical field, or equivalent experience. 5+ years of hands-on experience developing production software, including backend services, distributed systems, systems software, SDKs, infrastructure platforms, or customer-facing APIs. Demonstrated interest in security-critical systems, secure software development, trust infrastructure, or confidential computing, with the motivation to learn attestation deeply. Strong programming and debugging skills in at least one of C++, Rust or Go with the ability and interest to work across languages as the platform evolves. Strong computer-science fundamentals and practical knowledge of Linux, networking, APIs, concurrency, data stores, caching, and software testing. Experience owning a feature or component beyond initial implementation, including transforming ambiguity into a well-defined plan, reasoning about tradeoffs and failure modes, and carrying develop, testing, deployment, observability, production debugging, and maintenance through delivery. Willingness to join a primary on-call rotation and own production services through incident response, debugging, and durable follow-up improvements. Ways to Stand Out from the Crowd: Experience building or operating production services with Kubernetes, a major cloud provider, distributed-system failure handling, observability, SLOs, safe deployment systems, resilience testing, or incident response. Experience developing SDKs, verifiers, agents, proxies, customer-hosted software, offline systems, distributed caches, device-enablement frameworks, or hardware/software integration components. Familiarity with security fundamentals such as PKI, TLS/mTLS, certificates, signing, revocation, OCSP or CRLs, authentication and authorization, secrets management, secure boot, or hardware roots of trust. Experience or interest in attestation and confidential computing technologies such as TPMs, DICE, SPDM, IETF RATS, EAT, CoRIM, Intel TDX or SGX, AMD SEV-SNP, Arm CCA, HSMs, or GPU and accelerator attestation Experience hardening software that processes untrusted input through threat modeling, fuzzing, negative testing, memory or concurrency safety, dependency controls, artifact signing, or software-supply-chain practices. NVIDIA is leading the way in groundbreaking developments in Artificial Intelligence, High-Performance Computing, and Visualization. The GPU, our invention, serves as the visual cortex of modern computers and is at the heart of our products and services. Our work opens up new universes to explore, enables amazing creativity and discovery, and powers what were once science fiction inventions from artificial intelligence to autonomous cars. NVIDIA is looking for phenomenal people like you to help us accelerate the next wave of artificial intelligence. NVIDIA is widely considered to be one of the technology world’s most desirable employers. We have some of the most forward-thinking and dedicated people in the world working for us. Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 152,000 USD - 241,500 USD for Level 3, and 184,000 USD - 287,500 USD for Level 4. You will also be eligible for equity and benefits . Applications for this job will be accepted at least until August 23, 2026. This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes. NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.