Staff Identity Governance Engineer

Description

The company is a GPU cloud built for AI, offering cost-effective, high-performance infrastructure to AI start-ups and large enterprises. It helps AI teams get results faster by cutting the complexity of AI development, and it supports cost control, fast iteration and environmental responsibility.

The team works with ownership, accountability and openness, and the company says it is building technology that will power the future. It is one of the fastest-growing AI infrastructure companies.

This role makes sure every access grant is requested, approved, time-bound where needed and reviewed, with evidence that auditors can rely on. You will work with app owners and managers to get access reviews and approvals adopted, and with the privileged access engineer to govern admin roles on Tier Zero SaaS platforms. You will own the identity governance platform and stand behind its evidence with auditors for SOC 2, ISO 27001 and SOX.

Responsibilities

• Set up and run the identity governance platform. Okta Identity Governance is licensed, and other tools are under consideration.
• Build access request flows through the service desk that require app owner approval.
• Configure access expiry so that grants are time-bound where appropriate.
• Design and run quarterly access review campaigns for privileged access and annual campaigns for standard access.
• Automate revocation as part of access reviews.
• Govern admin roles on Tier Zero SaaS platforms (Okta, Google Workspace and GitHub) together with the privileged access engineer.
• Work with app owners and managers to drive adoption of reviews and approvals.
• Define birthright access by persona using Workday attributes.
• Define the app ownership data that access governance depends on.
• Produce audit evidence for SOC 2, ISO 27001 and SOX straight from the tools, not screenshots, and defend it with auditors.
• Track KPIs: quarterly privileged access review completion, annual standard access review completion, automatic revocation completion after reviews, and tool-generated evidence coverage for SOC 2, ISO 27001 and SOX access controls.

Requirements

• 7+ years in identity or security engineering, including at least 4 years implementing identity governance.
• Hands-on implementation experience with Okta Identity Governance, SailPoint, Saviynt, ConductorOne, Opal, Lumos or similar platforms.
• Experience designing and running access reviews and certifications end to end, including revocation.
• Experience with role or persona modelling, birthright rules and separation of duties.
• Working knowledge of SOC 2, ISO 27001 or SOX access controls and the evidence auditors request.
• Scripting and API integration skills for apps without native connectors.
• Ability to get app owners and managers to adopt access reviews and approvals, and to explain the supporting evidence to auditors.

Conditions

Base salary range is $170,000 - $230,000 USD. Actual pay depends on factors such as skills, experience, education and location.

The role may also be eligible for bonus, equity and/or commission.

Performance reviews take place every 12 months.

Work model is flexible, with autonomy over how you structure your day.

The company does not accept unsolicited submissions from recruitment agencies.

The company encourages applications from people of colour, LGBTQ+ people, people with disabilities, neurodivergent people, parents, carers and people from lower socio-economic backgrounds, and will make accommodations on request.

The duties listed are not exhaustive, and additional tasks may be assigned by management in line with the role's skills and qualifications.

Benefits

• Competitive benefits may include medical, dental and vision cover, flexible paid time off, parental leave and retirement plan participation.
• A progression plan tailored to your goals, with chances to lead cross-functional initiatives and help shape capital strategy, with full support from the company.