Staff Software Engineer - Enterprise Security and Identity Tooling
About the role
This is a hands-on software engineering role within the Enterprise Security and Identity function, focused on building the tooling that connects identity, access, SaaS, endpoint posture, privileged workflows, security telemetry, compliance evidence, and automation into a reliable operating model. You will work closely with Enterprise Security, IT, Cyber Defence, Platform Engineering, Product Engineering, GRC, and infrastructure teams.
Responsibilities
- Built internal software services and integrations across identity, access, SaaS, endpoint, privileged access, security data, and workflow systems
- Design backend APIs, data models, and integration patterns for users, devices, groups, roles, applications, permissions, owners, exceptions, and audit trails
- Integrate third-party systems and internal tools through APIs, webhooks, queues, events, and workflow engines
- Establish practical source-of-truth boundaries and ownership across connected systems
- Automate joiner, mover, leaver workflows, access requests, entitlement cleanup, approvals, revocation, and evidence capture
- Create workflow automation that gives engineers fast access when justified while removing access when no longer needed
- Support identity-aware tooling for SSO, SCIM, OAuth/OIDC, RBAC, service accounts, non-human identities, and privileged access paths
- Prioritize tooling improvements around JML, privileged access, non-human identities, and access evidence with the Identity and Access lead
- Improve security tooling reliability through testing, observability, error handling, retries, idempotency, deployment safety, and operational runbooks
- Define engineering standards for code review, testing, deployment, observability, secrets handling, and runbooks
- Map high-value workflows that are currently manual, fragile, or poorly integrated
- Build reusable internal services and integrations that reduce manual work and create measurable security evidence
- Connect identity and access events with security telemetry and reporting to support detection, investigation, audit, and executive metrics
- Preserve clear evidence across access and approval workflows to support compliance and operational review
- Implement guardrails for AI and agentic workflows, including approval, attribution, logging, least privilege, and safe write paths
- Ship meaningful workflow improvements such as access automation, revocation automation, identity evidence capture, entitlement cleanup, or SaaS onboarding automation
Qualifications
- 8+ years of professional software engineering experience, or equivalent depth building production software systems
- Strong backend engineering skills in Python, Go, Java, TypeScript, or similar modern languages
- Experience designing, building, testing, deploying, and operating production services or internal platforms
- Strong understanding of APIs, data modeling, distributed systems, reliability, observability, and operational excellence
- Experience integrating SaaS platforms, enterprise tools, internal services, or third-party systems through APIs, webhooks, queues, events, or workflow engines
- Familiarity with identity and access concepts such as SSO, OAuth/OIDC, SAML, SCIM, RBAC, MFA, service accounts, or access reviews
- Strong security fundamentals across authentication, authorization, secrets handling, audit logging, least privilege, and secure software development
- Ability to work through ambiguity, make sound technical tradeoffs, and turn messy operational needs into maintainable software
- Experience building identity, access, security, compliance, IT automation, developer productivity, or internal platform tooling is preferred
- Experience with privileged access, JIT workflows, approval systems, lifecycle automation, entitlement management, non-human identity governance, or audit-ready evidence tooling is preferred
Benefits
At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.
- Hightly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months.
- Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed.
- Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support.
- Human-First Flexibility: We treat you as humans first.
Schedule
Nscale offers a flexible schedule to accommodate your needs.
Pay
The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.
Salary Range: $200,000 - $250,000 USD