Senior Software Engineer, Attestation Services - DGX Cloud

NVIDIA develops technologies in artificial intelligence, high-performance computing, and visualization. The Senior Software Engineer will build and operate production attestation and trust services for confidential computing and next-generation GPU platforms, including cloud services, verification flows, SDKs, command-line integrations, APIs, and customer-hosted capabilities. The role also involves improving reliability and security, developing testing and automation, conducting root-cause analysis, participating in reviews and on-call support, and mentoring newer engineers.

Responsibilities:

• Build and maintain components across the Attestation Cloud platform, verification flows, software development kits and command-line tools integrations, and customer-hosted capabilities, including enablement for new NVIDIA devices and platform generations
• Own well-scoped projects end to end, turning incomplete requirements into a clear design, maintainable code, automated tests, a safe rollout, useful telemetry, and durable production support
• Improve reliability and security in the components you own, including dependency failures, retries, idempotency, caching, data stores, authentication, revocation freshness, compatibility, graceful degradation, and release validation
• Write the test fixtures, conformance tooling, and automation that keep local and remote verification behavior consistent and catch regressions before customers do
• Drive root-cause analysis for issues in your features and subsystems using logs, traces, telemetry, and targeted experiments, working with senior engineers on problems that span multiple systems
• Participate in design and code reviews, document what you build, and grow into mentoring newer engineers on the team
• Participate in the team's rotating on-call schedule and follow incidents through to lasting fixes

Requirements:

• BS or MS in Computer Science, Computer Engineering, Information Security, or a related technical field, or equivalent experience
• 5+ years of hands-on experience developing production software, including backend services, distributed systems, systems software, SDKs, infrastructure platforms, or customer-facing APIs
• Demonstrated interest in security-critical systems, secure software development, trust infrastructure, or confidential computing, with the motivation to learn attestation deeply
• Strong programming and debugging skills in at least one of C++, Rust or Go with the ability and interest to work across languages as the platform evolves
• Strong computer-science fundamentals and practical knowledge of Linux, networking, APIs, concurrency, data stores, caching, and software testing
• Experience owning a feature or component beyond initial implementation, including transforming ambiguity into a well-defined plan, reasoning about tradeoffs and failure modes, and carrying develop, testing, deployment, observability, production debugging, and maintenance through delivery
• Willingness to join a primary on-call rotation and own production services through incident response, debugging, and durable follow-up improvements
• Experience building or operating production services with Kubernetes, a major cloud provider, distributed-system failure handling, observability, SLOs, safe deployment systems, resilience testing, or incident response
• Experience developing SDKs, verifiers, agents, proxies, customer-hosted software, offline systems, distributed caches, device-enablement frameworks, or hardware/software integration components
• Familiarity with security fundamentals such as PKI, TLS/mTLS, certificates, signing, revocation, OCSP or CRLs, authentication and authorization, secrets management, secure boot, or hardware roots of trust
• Experience or interest in attestation and confidential computing technologies such as TPMs, DICE, SPDM, IETF RATS, EAT, CoRIM, Intel TDX or SGX, AMD SEV-SNP, Arm CCA, HSMs, or GPU and accelerator attestation
• Experience hardening software that processes untrusted input through threat modeling, fuzzing, negative testing, memory or concurrency safety, dependency controls, artifact signing, or software-supply-chain practices