Staff Security Engineer - PAM and Agentic Identity

NVIDIA is hiring a Staff Security Engineer - PAM and Agentic Identity in Santa Clara, United States. It pays $168k-$270k a year and Level rates it ; you can apply on NVIDIA.

Level's read on this job

Uses AI ●●○○ is how Level rates this cybersecurity role: an ordinary role that requires AI tools.
Pay on this posting starts 5% higher than the typical cybersecurity posting on Level.
The posting mentions AI agents among its tools and skills.
Level classes it as a lead role.
NVIDIA has 2,800+ other open roles on Level.

AI in this role

ai-agents

NVIDIA seeks a skilled engineer to upgrade, automate, tailor, and expand our Privileged Access Management (PAM) and Non-Human Identity (NHI) capabilities to fit agentic era expectations. This position will focus on improving the value of current platforms. It will also simplify the user and operator experience and expand secure access controls for infrastructure, automation, service identities, and agentic workflows. As AI agents, coding agents, internal developer platforms, and autonomous workflows become more common across NVIDIA, this role will help ensure privileged access and infrastructure access services can scale with stronger identity, authorization, observability, and auditability.

You will engage with Enterprise Security, Product Security, infrastructure and platform SRE, developer efficiency, and business teams to reduce standing privilege, boost auditability, simplify adoption, and facilitate self-servicing at scale. This role calls for balanced hands-on experience in both infrastructure engineering and software engineering, robust system/platform engineering expertise, an SRE viewpoint, and the aptitude to build reliable automation, integrations, APIs, and internal tooling within hybrid technology environments, including AI/LLM-enabled applications and agentic workflows.

What you will be doing:

Modernize PAM, secure infrastructure access, and NHI services for NVIDIA’s agentic era, covering privileged users, service accounts, AI/coding/service agents, and autonomous workflows.
Automate and extend existing platforms through APIs, custom connectors, policy-as-code, onboarding templates, reporting, and service catalog integrations to improve self-service adoption and reduce toil.
Integrate PAM, NHI, and secure access controls into AI/LLM-enabled applications, agent frameworks, internal developer platforms, and autonomous workflows.
Expand our services coverage across Linux/Windows, cloud and on-prem systems, container orchestration platforms, data storage solutions, network devices, developer platforms, IaC, CI/CD, and internal tools.
Mature core controls including JIT access, zero standing privilege, session recording, break-glass access, credential rotation, access reviews, and audit evidence.
Own service reliability with SRE rigor, including monitoring, alerting, incident response, operational readiness, continuous improvement, and practical technology evaluation.

What we need to see:

Bachelor’s degree or Master’s degree in computer science or equivalent experience
8+ years of experience in security, infrastructure/platform engineering, SRE, IAM, or related enterprise technology roles, including 4+ years directly related to PAM and NHI solutions.
Balanced infrastructure and software development skills, with the ability to operate complex production services and build automated processes, system connections, application interfaces, connectors, and operational tooling.
Practical experience working within Linux and Windows environments, on-prem and cloud infrastructure, Kubernetes, databases, CI/CD systems, and production operations.
Experience with PAM, or secrets platforms such as Idira/CyberArk, Teleport, Azure PIM, HashiCorp Vault, or similar technologies.
Strong SRE mentality, operational rigor, and collaboration skills across global engineering, IT, security, and platform teams.

Ways to stand out from the crowd:

Hands-on ability to maintain access platforms, build custom connectors, integrate unsupported targets, and automate onboarding, credential, and session workflows.
Familiarity with modern access patterns such as short-lived credentials, identity-aware proxies, session recording, access requests, device trust, and workload identity.

NVIDIA is widely considered to be one of the technology world’s most desirable employers. We have some of the most intelligent and hardworking people in the world working for us. If you're creative and autonomous, we want to hear from you!

Your base salary will be determined based on your location, experience, and other objective job-related factors. The expected base salary range for this position is 168,000 USD – 270,250 USD.

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until November 3, 2026.

This posting is for an existing vacancy.

NVIDIA uses AI tools in its recruiting processes.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

How we rate this

Staff Security Engineer - PAM and Agentic Identity at NVIDIA rates 42 out of 100 for how much of the daily work is AI. That makes it Uses AI (AI Level 2 of 4). The level is about AI in the job, not seniority.

Classification

Uses AI. An ordinary role that requires AI tools.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Staff Security Engineer - PAM and Agentic Identity is an open job at NVIDIA.
Level rates this role AI Level 2 of 4: Uses AI.
The listed salary is $168k-$270k a year.
The role is based in US, CA, Santa Clara.
The job was posted on September 10, 2026.
Seniority: lead.
Applications are handled by NVIDIA. Apply on NVIDIA

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

AI agents

Also common in cybersecurity jobs at this level

Python AWS Generative AI Java Google Cloud C++

Pay

This job starts at: $168k
Typical cybersecurity job: $160k

This posting starts 5% above the typical cybersecurity job. See cybersecurity jobs

Questions you could be asked

How do you decide when an AI agent can act on its own versus asking for approval first?
This role expects you to use AI tools as part of the job. Which ones have you used, and for what?
Tell me about a time an AI tool got something wrong. How did you catch it?

Adapt your resume

List these exact terms on your resume: AI agents. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Put the AI tool in a bullet point about what you did, not just in a skills list. This role treats it as a required part of the job.

Get your CV reviewed before you apply

Send your CV and the role you want next. Your review arrives by email within 3 days.

Get a free CV review Check your resume with the ATS resume checker