Senior Security Architect – Cloud Authentication, Authorization

NVIDIA

Senior Security Architect guiding architectural vision for cloud authentication and authorization at NVIDIA. Collaborate on identity and authorization systems across NVIDIA cloud platforms and AI-enabled systems.

Posted 6/30/2026full-timeSanta Clara • California, North Carolina, Texas • 🇺🇸 United StatesSenior💰 $184,000 - $287,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity and security architecture, particularly in cloud authentication, authorization, and identity management. Proficient in developing frameworks and processes for managing identities across AI-enabled systems and distributed environments.

Highest-signal resume keywords

Cloud SecurityIdentity And Access Management (IAM)Authentication And Authorization ProtocolsThreat ModelingZero Trust Architecture

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecuritySecurity ArchitectureWorkload IdentityAgent IdentityAuthorization FrameworksToken ExchangeCertificate Lifecycle ManagementFine-Grained AuthorizationAI Security RisksRisk Analysis

Soft Skills

Clear CommunicationPartner-Team AlignmentPractical Mitigation Development

Tools & Technologies

OIDCOAuth 2.0SAMLMTLS

Industry Keywords

Distributed SystemsIdentity ArchitectureCyber-AwarenessCrypto-AgilityPost-Quantum Cryptography

Tech Stack

Tools & technologies

CloudCyber SecurityDistributed Systems

About the role

Key responsibilities & impact

Outline the security architecture strategy for cloud authentication, authorization, workload identity, and agent identity across NVIDIA cloud platforms, AI-enabled systems, enterprise connectors, services, and automation.
Outline processes for establishing, linking, authorizing, delegating, auditing, and retiring human, workload, service, and autonomous agent identities.
Develop authorization and delegation frameworks for AI agents and enterprise connectors, encompassing consent, token exchange, prioritized authority, sensitive-action approval, revocation, and protections against confused-deputy behavior.
Lead architecture reviews and threat modeling for high-risk identity and access flows.
Establish identity lifecycle, telemetry, and emergency-disablement patterns for token issuance, policy decisions, privilege elevation, tool invocation, data access, credential rotation, grant revocation, and compromised or untrusted identities.
Convert emerging AI security risks into authentication, authorization, audit, and execution-boundary requirements.
Partner with identity, cloud, platform, application, AI security, governance, detection, and incident response teams to align architecture decisions with risk strategy and operational reality.
Build reusable architecture patterns, decision records, exception criteria, and implementation mentorship.

Requirements

What you’ll need

8+ years experience in cybersecurity, security architecture, cloud security, IAM, application security, product security, platform security, infrastructure security, or security engineering for distributed systems.
Extensive knowledge in cloud authentication, authorization, IAM, workload identity, agent identity, non-human identity, or identity architecture.
Bachelor's degree in Engineering, Cybersecurity, Data Engineering, or a related technical field, or equivalent experience.
Proficiency in authentication and authorization protocols and frameworks, such as OIDC, OAuth 2.0, SAML, federation, delegation, token exchange, token scope, issuer and audience boundaries, consent, mTLS, certificate-backed identity.
Direct involvement in handling workload and agent identities, covering attestation processes, Zero Trust Architecture concepts, short-lived credentials, and temporary identities.
Experience developing authorization boundaries for distributed systems, including fine-grained authorization patterns, control points, prioritized delegation, model/data/tool access controls, sensitive-action approval, and execution boundaries.
Proficiency with identity and certificate lifecycle management, including enrollment, provisioning, scope definition, prioritized issuance, renewal, rotation, revocation, expiration, auditability, deprovisioning, lifecycle automation, and awareness of crypto-agility and post-quantum cryptography implications.
Hands-on understanding of AI security risks combined with adequate proficiency in AI-enabled systems to assess timely injection, data exfiltration, unsafe tool use, overbroad authorization, and loss of human accountability.
Strong foundational cybersecurity judgment, including threat modeling, architecture review, risk analysis, practical mitigation development, clear communication of assumptions, partner-team alignment, and follow-through through implementation, verification, documentation, and closure.

Benefits

Comp & perks

equity
benefits 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score