Staff Security Engineer - PAM and Agentic Identity - CA, Santa Clara, United States
$168,000 - $270,250 USD yearly
Originally posted 10 September 2026 by the employer.
About the role
This role focuses on upgrading, automating, tailoring, and expanding Privileged Access Management (PAM) and Non-Human Identity (NHI) capabilities to support agentic era expectations within NVIDIA.
What you'll do
- Modernize PAM, secure infrastructure access, and NHI services for NVIDIA’s agentic era, covering privileged users, service accounts, AI/coding/service agents, and autonomous workflows.
- Automate and extend existing platforms through APIs, custom connectors, policy-as-code, onboarding templates, reporting, and service catalog integrations.
- Integrate PAM, NHI, and secure access controls into AI/LLM-enabled applications, agent frameworks, internal developer platforms, and autonomous workflows.
- Expand services coverage across Linux/Windows, cloud and on-prem systems, container orchestration platforms, data storage solutions, network devices, developer platforms, IaC, CI/CD, and internal tools.
- Mature core controls including JIT access, zero standing privilege, session recording, break-glass access, credential rotation, and access reviews.
- Own service reliability with SRE rigor, including monitoring, alerting, incident response, and operational readiness.
What you'll need
- Bachelor’s degree or Master’s degree in computer science or equivalent experience.
- 8+ years of experience in security, infrastructure/platform engineering, SRE, IAM, or related enterprise technology roles.
- 4+ years directly related to PAM and NHI solutions.
- Balanced infrastructure and software development skills, with the ability to operate complex production services and build automated processes, system connections, application interfaces, connectors, and operational tooling.
- Practical experience working within Linux and Windows environments, on-prem and cloud infrastructure, Kubernetes, databases, CI/CD systems, and production operations.
- Experience with PAM or secrets platforms such as Idira/CyberArk, Teleport, Azure PIM, HashiCorp Vault, or similar technologies.
Skills: Privileged Access Management, Non-Human Identity, secure access controls, AI/LLM-enabled applications, JIT access
This role has been open 34 days — well below the 58-day median for Hardware Security Engineering roles.
Hardware Security Engineering · Hardware Security
|
Open roles in category
184
|
Median days open
58 d
|
Median salary
$229k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | NVIDIA | All employers we track in this specialty (184 roles · 47 employers) |
|---|---|---|
| Open roles in this specialty | 27 | 184 |
| Median days open | 33 d | 58 d (−25 d vs this employer) |
| Median salary (USD postings) | — | $229k |
Skills observed across this category: Privileged Access Management, Non-Human Identity, secure access controls, AI/LLM-enabled applications, JIT access
Who's hiring in this category
- NVIDIA (this employer) · 27 open roles · median 33 d
- NXP Semiconductors · 23 open roles · median 105 d
- Qualcomm · 17 open roles · median 119 d
- Arm Holdings · 13 open roles · median 99 d
- STMicroelectronics · 11 open roles · median 17 d
- AMD · 9 open roles · median 41 d
How we counted: 184 open Hardware Security Engineering (Hardware Security) roles from 47 employers tracked in the SemiconductorJobs index, counted 15 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there. Figures refresh nightly.