Identity Governance Engineer AMER

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

We're hiring a Staff Identity Governance Engineer to make every access grant at Nscale requested, approved, time-bound where it should be, and reviewed—with evidence an auditor can trust.

You'll work with app owners and managers to drive adoption of access reviews and approvals, and partner with the privileged access engineer to govern admin roles on Tier Zero SaaS platforms. You'll own the identity governance platform and stand behind the evidence it produces with auditors, making access governance reliable in practice as well as demonstrable for SOC 2, ISO 27001 and SOX.

Location:

Houston, Seattle, New York, San Francisco.

• Stand up and run Nscale's identity governance platform;
  Okta Identity Governance is licensed, with other tools under consideration.
• Build access request flows through the service desk with app owner approval.
• Configure access expiry so grants are time-bound where appropriate.

• Design and run quarterly access review campaigns for privileged access and annual campaigns for standard access.
• Implement automatic revocation as part of access reviews.
• Govern admin roles on Tier Zero SaaS platforms—Okta, Google Workspace and Git Hub—with the privileged access engineer.
• Drive adoption of reviews and approvals with app owners and managers.

• Define birthright access by persona using Workday attributes.
• Define the app ownership data that access governance depends on.
• Produce audit evidence for SOC 2, ISO 27001 and SOX directly from the tools rather than screenshots, and stand behind it with auditors.

• Quarterly privileged access review completion
• Annual standard access review completion
• Automatic revocation completion following access reviews
• Coverage of tool-generated evidence for SOC 2, ISO 27001 and SOX access controls

• 7+ years in identity or security engineering, including at least 4 years implementing identity governance.
• Implementation experience with Okta Identity Governance, SailPoint, Saviynt, Conductor One, Opal, Lumos or similar platforms.
• Experience designing and running access reviews and certifications end to end, including revocation.
• Experience with role or persona modelling, birthright rules and separation of duties.
• Working knowledge of SOC 2, ISO 27001 or SOX access controls and the evidence auditors ask for.
• Scripting and API integration skills for apps that lack native connectors.
• Ability to get app owners and managers to adopt access reviews and approvals, and explain the supporting evidence to auditors.

At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.

Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12…