Staff Security Engineer, PAM and Agentic Identity

Nvidia

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Santa Clara, CA
Salary
$168,000–$270,250 / yr
Employment
Full-time
Posted
24 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $185k
This role $219k
$129k most similar roles pay here $285k

This role pays more than 78% of similar roles. Most pay $154,914–$216,000 — the shaded band above. At the midpoint, this role pays about $219k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About Nvidia

Nvidia is a leading designer of graphics processing units (GPUs) and system-on-chip units, powering gaming, professional visualization, data centers, and artificial intelligence workloads. Industry: Semiconductors & AI Computing

Nvidia currently has 1391 open roles on FindRole.

Listed pay typically runs $184,000–$287,500 across 1116 roles with salary data.

Most-posted roles

View all roles at Nvidia

At a glance

TL;DR · Staff Security Engineer, PAM and Agentic Identity

Staff Security Engineer - PAM and Agentic Identity joins the team to modernize Privileged Access Management and Non-Human Identity capabilities for an agentic era. The role involves upgrading, automating, and expanding secure access controls for infrastructure, service identities, and autonomous workflows while simplifying user experience and reducing standing privilege. You will build reliable automation, APIs, custom connectors, and internal tooling within hybrid environments including AI/LLM-enabled applications. Key responsibilities include maturing JIT access, credential rotation, and session recording across Linux, Windows, cloud, and on-prem systems, including Kubernetes and CI/CD pipelines. Required skills include a balance of infrastructure and software engineering expertise with experience in tools like CyberArk, Teleport, Azure PIM, or HashiCorp Vault. You will solve complex security challenges by integrating identity-aware proxies and policy-as-code into developer platforms to ensure scalable auditability and operational reliability.

What does a Security Engineer earn in California?

Median $203125 from 41 postings across 18 companies.

See salary data

What you'll do

  • Modernize and expand Privileged Access Management (PAM) and Non-Human Identity (NHI) capabilities for agentic workflows.
  • Automate existing platforms using APIs, custom connectors, policy-as-code, and onboarding templates to reduce manual toil.
  • Integrate secure access controls into AI/LLM-enabled applications and internal developer platforms.
  • Expand service coverage across Linux, Windows, cloud environments, container orchestration, and network devices.
  • Mature core security controls including Just-In-Time (JIT) access, credential rotation, and session recording.
  • Manage service reliability using SRE principles, including monitoring, alerting, and incident response.
  • Build automated tools and integrations to facilitate self-service for infrastructure and service identities.

What we're looking for

  • Bachelor's degree or Master's degree in computer science or equivalent experience.
  • 8+ years of experience in security, infrastructure/platform engineering, SRE, IAM, or related enterprise technology roles.
  • 4+ years of experience directly related to PAM and NHI solutions.
  • Balanced skills in both infrastructure engineering and software development for building automated processes and tools.
  • Experience with Linux and Windows environments, cloud and on-prem infrastructure, Kubernetes, databases, and CI/CD systems.
  • Experience with PAM or secrets platforms such as Idira, CyberArk, Teleport, Azure PIM, HashiCorp Vault, or similar technologies.
  • Strong SRE mentality and operational rigor to manage service reliability, monitoring, and incident response.
  • Ability to build custom connectors and automate onboarding, credential, and session workflows (preferred).

More like this

Similar roles

Staff Security Engineer

Intuit

Mountain View, CA 29 days ago $207,000–$280,000
Security Engineering IAM Kubernetes Terraform CI/CD Golang Java AWS Google Cloud Platform Azure PKI Cryptography Vault DevSecOps SRE Network Security Vulnerability Management Serverless Configuration Management
10+ yrs exp

Staff Lead Security Engineer, PAM

CME Group

Chicago, IL 46 days ago $132,100–$220,100
CyberArk Idira PAM IAM Directory Services MFA Federation Python PowerShell Linux Windows GCP DevOps Agile Scrum

IAM Security Engineer

Cloudflare, Inc

Austin, TX 23 days ago
IAM SAML OIDC OAuth SCIM RBAC ABAC Python TypeScript Bash Kubernetes Terraform Ansible Zero Trust LLMs Infrastructure as Code ITDR PAM IGA
Hybrid

Staff Security Engineer

Micron Technology

Boise, ID 44 days ago
DLP Data Classification Azure AWS GCP Python PowerShell Splunk SIEM SOAR Machine Learning UiPath Copilot Studio SharePoint Regex SaaS Automation
5+ yrs exp