Senior Software Engineer, Attestation Services - DGX Cloud

Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. As part of the DGX Cloud organization, the Attestation Services team is building the unified trust layer for Confidential Compute and NVIDIA-wide platforms. In this role, you will architect and operate a global, cloud-native attestation platform that proves the integrity and authenticity of NVIDIA systems at scale. You’ll own highly available, multi-tenant services and APIs that meet 99.9%+ uptime targets. You’ll partner directly with security, silicon, and cloud engineering teams to turn embedded hardware trust mechanisms and attestation standards into reliable, self-service cloud capabilities. If you are passionate about building foundational security and trust services with company-wide impact, we’d love to have you on the team. What you will be doing: Lead the development and build of NVIDIA's attestation platform. Establish a single source of trust for the integrity of physical devices and digital systems across Data Center, Automotive, Networking, and AI ecosystems. Define and evolve a unified attestation strategy across hardware roots of trust, firmware, and runtime integrity — partnering with security, silicon, platform, and software teams to deliver end-to-end trust from silicon to customer-facing SDKs. Develop highly available, low-latency global cloud services, RESTful APIs, SDKs, and CLIs with 99.9%+ availability, horizontal scalability, automated rollouts, and robust observability. Architect adaptable, rule-based appraisal policy engines (e.g., Open Policy Agent) for evaluating attestation evidence against endorsements and reference values across diverse compliance and security requirements. Integrate attestation with firmware signing chains, provenance verification, and software bill of materials (SBOM) to ensure end-to-end supply chain trust across NVIDIA's hardware and software portfolio. Advocate for and implement IETF RATS (RFC 9334) and related specifications such as Entity Attestation Tokens (EAT), driving interoperability with customer and partner ecosystems via both passport and background-check interaction models. Define and promote secure development, deployment, and operational guidelines incorporating SRE principles for observability, reliability, automation, and incident response. Mentor engineers and develop a culture of engineering excellence, clear design thinking, and high-quality execution. What we need to see: BS/MS in Computer Science, Information Security, or a related field, or equivalent experience. 12+ years of experience designing and building large-scale, distributed systems and cloud services, with at least 3 years focused on security, attestation, or trusted computing. Strong programming proficiency in C or C++; experience with additional languages such as Rust, Go, or Python is a strong plus. Experience with device or software attestation, including remote attestation protocols, challenge-response flows, and trust model design (verifier, relying party, endorser, reference value provider). Solid understanding of cryptographic concepts, PKI, attestation token formats (JWT, CWT, EAT), and platform security technologies including TEEs (Intel SGX/TDX, AMD SEV-SNP), TPMs, DICE, and SPDM. Proven track record building and operating scalable REST APIs and microservices in production. Experience with cloud-native platforms: Kubernetes, Docker/containers, and CI/CD pipeline development and management. Demonstrated ability to lead complex, multi-functional technical projects from architecture through deploym ... (truncated, view full listing at source)