Staff Identity Governance Engineer
About this role
About Nscale
Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.
We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.
About the Role
We're hiring a Staff Identity Governance Engineer to make every access grant at Nscale requested, approved, time-bound where it should be, and reviewed—with evidence an auditor can trust.
You'll work with app owners and managers to drive adoption of access reviews and approvals, and partner with the privileged access engineer to govern admin roles on Tier Zero SaaS platforms. You'll own the identity governance platform and stand behind the evidence it produces with auditors, making access governance reliable in practice as well as demonstrable for SOC 2, ISO 27001 and SOX.
Location: Houston, Seattle, New York, San Francisco.
What you'll be doing
Governance platform and access requests
• Stand up and run Nscale's identity governance platform; Okta Identity Governance is licensed, with other tools under consideration. • Build access request flows through the service desk with app owner approval. • Configure access expiry so grants are time-bound where appropriate.
Access reviews and privileged access
• Design and run quarterly access review campaigns for privileged access and annual campaigns for standard access. • Implement automatic revocation as part of access reviews. • Govern admin roles on Tier Zero SaaS platforms—Okta, Google Workspace and GitHub—with the privileged access engineer. • Drive adoption of reviews and approvals with app owners and managers.
Access models and audit evidence
• Define birthright access by persona using Workday attributes. • Define the app ownership data that access governance depends on. • Produce audit evidence for SOC 2, ISO 27001 and SOX directly from the tools rather than screenshots, and stand behind it with auditors.