Staff Identity Governance Engineer

Nscale; New York (NY); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Base + bonus + equity

Flexible paid time off

Parental leave

Retirement plan participation

Medical, dental, vision

Job summary

Nscale seeks a Staff Identity Governance Engineer to ensure access grants are requested, approved, time-bound, and auditable with trusted evidence for auditors.

You will own the governance platform, drive access reviews with app owners, and govern admin roles on Tier Zero SaaS platforms in collaboration with the privileged access engineer.

Qualifications

• 7+ years in identity or security engineering, including at least 4 years implementing identity governance.
• Implementation experience with Okta Identity Governance, SailPoint, Saviynt, ConductorOne, Opal, Lumos or similar platforms.
• Experience designing and running access reviews and certifications end to end, including revocation.
• Experience with role or persona modelling, birthright rules and separation of duties.
• Working knowledge of SOC 2, ISO 27001 or SOX access controls and the evidence auditors ask for.
• Scripting and API integration skills for apps that lack native connectors.
• Ability to get app owners and managers to adopt access reviews and approvals, and explain the supporting evidence to auditors.

Responsibilities

• Governance platform and access requests: Stand up and run Nscale's identity governance platform; Okta Identity Governance is licensed, with other tools under consideration.
• Access reviews and privileged access: Design and run quarterly access review campaigns for privileged access and annual campaigns for standard access.
• Access models and audit evidence: Define birthright access by persona using Workday attributes and produce audit evidence for SOC 2, ISO 27001 and SOX directly from the tools.

Skills

Identity engineering

Security engineering

Okta Identity Governance

SailPoint

Saviynt

ConductorOne

APIs

Scripting

Tools

Okta Identity Governance

SailPoint

Saviynt

ConductorOne

Opal

Lumos

Job description

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

We're hiring a Staff Identity Governance Engineer to make every access grant at Nscale requested, approved, time-bound where it should be, and reviewed—with evidence an auditor can trust.

You'll work with app owners and managers to drive adoption of access reviews and approvals, and partner with the privileged access engineer to govern admin roles on Tier Zero SaaS platforms. You'll own the identity governance platform and stand behind the evidence it produces with auditors, making access governance reliable in practice as well as demonstrable for SOC 2, ISO 27001 and SOX.

Location: Houston, Seattle, New York, San Francisco.

What you'll be doing

Governance platform and access requests

• Stand up and run Nscale's identity governance platform; Okta Identity Governance is licensed, with other tools under consideration.
• Build access request flows through the service desk with app owner approval.
• Configure access expiry so grants are time-bound where appropriate.

Access reviews and privileged access

• Design and run quarterly access review campaigns for privileged access and annual campaigns for standard access.
• Implement automatic revocation as part of access reviews.
• Govern admin roles on Tier Zero SaaS platforms—Okta, Google Workspace and GitHub—with the privileged access engineer.
• Drive adoption of reviews and approvals with app owners and managers.

Access models and audit evidence

• Define birthright access by persona using Workday attributes.
• Define the app ownership data that access governance depends on.
• Produce audit evidence for SOC 2, ISO 27001 and SOX directly from the tools rather than screenshots, and stand behind it with auditors.

KPIs

• Quarterly privileged access review completion
• Annual standard access review completion
• Automatic revocation completion following access reviews
• Coverage of tool-generated evidence for SOC 2, ISO 27001 and SOX access controls

About You

• 7+ years in identity or security engineering, including at least 4 years implementing identity governance.
• Implementation experience with Okta Identity Governance, SailPoint, Saviynt, ConductorOne, Opal, Lumos or similar platforms.
• Experience designing and running access reviews and certifications end to end, including revocation.
• Experience with role or persona modelling, birthright rules and separation of duties.
• Working knowledge of SOC 2, ISO 27001 or SOX access controls and the evidence auditors ask for.
• Scripting and API integration skills for apps that lack native connectors.
• Ability to get app owners and managers to adopt access reviews and approvals, and explain the supporting evidence to auditors.

What we can offer you

At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.

Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months.

Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed.

Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross‑functional initiatives and shaping capital strategy — always with our full support.

Human-First Flexibility: We treat you as humans first. Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.

We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.

If there's anything we can do to accommodate your specific situation, please let us know.

The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.

Salary Range

The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.

The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.

Salary Range

$170,000 - $230,000 USD

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.