Staff Identity Governance Engineer

Nscale • Seattle, WA

1d • $170,000 - $230,000

About The Position

Nscale is hiring a Staff Identity Governance Engineer to ensure access grants are requested, approved, time-bound where appropriate, and reviewed with reliable evidence for auditors. The engineer will work with application owners and managers to drive adoption of access reviews and approvals, and partner with the privileged access engineer to govern administrator roles on Tier Zero SaaS platforms. This role owns Nscale’s identity governance platform and the audit evidence it produces to support SOC 2, ISO 27001, and SOX.

The position is based in Houston, Seattle, New York, or San Francisco. The identity governance platform is to be established and operated; Okta Identity Governance is licensed, and other tools are under consideration. The role includes defining access models using Workday attributes and app ownership data, running access review campaigns, and producing tool-generated audit evidence. The stated base salary range is $170,000–$230,000 USD; the role may also be eligible for bonus, equity, and/or commission programs.

Requirements

• At least 7 years of experience in identity or security engineering, including at least 4 years implementing identity governance.
• Implementation experience with Okta Identity Governance, SailPoint, Saviynt, ConductorOne, Opal, Lumos, or similar platforms.
• Experience designing and running access reviews and certifications end to end, including revocation.
• Experience with role or persona modeling, birthright rules, and separation of duties.
• Working knowledge of SOC 2, ISO 27001, or SOX access controls and the evidence auditors request.
• Scripting and API integration skills for applications that lack native connectors.
• Ability to gain app owner and manager adoption of access reviews and approvals, and to explain supporting evidence to auditors.

Responsibilities

• Stand up and operate Nscale’s identity governance platform.
• Build access request flows through the service desk that include app owner approval.
• Configure access expiry so grants are time-bound where appropriate.
• Design and run quarterly access review campaigns for privileged access and annual campaigns for standard access.
• Implement automatic revocation as part of access reviews.
• Govern administrator roles on Okta, Google Workspace, and GitHub with the privileged access engineer.
• Drive adoption of access reviews and approvals with app owners and managers.
• Define birthright access by persona using Workday attributes.
• Define the app ownership data required for access governance.
• Produce tool-generated audit evidence for SOC 2, ISO 27001, and SOX access controls, and explain and support that evidence with auditors.
• Track quarterly privileged access review completion, annual standard access review completion, automatic revocation completion following reviews, and coverage of tool-generated audit evidence.

Benefits

• Competitive US compensation package including base salary, bonus, and equity; performance reviews every 12 months.
• Flexible workplace and autonomy to shape the workday.
• Potential eligibility for bonus, equity, and/or commission programs.
• Potential competitive benefits package including medical, dental, and vision coverage, flexible paid time off, parental leave, and retirement plan participation.
• Dynamic progression plan and opportunities to lead cross-functional initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed