Director, Enterprise Security & Identity

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

We're hiring a Director, Enterprise Security & Identity to architect and engineer the identity and enterprise security foundation of Nscale's global AI infrastructure.

Reporting to the CISO, this is a highly technical, engineering-led leadership role focused on building and operating secure-by-design identity systems across workforce, production, and cloud environments. The role sits at the intersection of security, platform, and enterprise systems, partnering closely with Platform Security, Engineering, Cyber Defense, and teams responsible for corporate SaaS and cloud access.

Identity is a core control plane in modern cloud infrastructure, and this role is critical to how Nscale scales securely. You'll lead the design of Zero Trust identity architecture, strengthen privileged access, reduce insider risk, and build automated controls that improve security posture across the business and production environments.

This role will be part of the global CISO organization.

What you'll be doing

Identity Architecture & Engineering

• Architect and implement a Zero Trust identity model across corporate and production environments.
• Design secure federation, SSO, and conditional access frameworks.
• Engineer identity lifecycle automation for joiner, mover, and leaver workflows.
• Eliminate standing privilege through JIT access models and automated approval workflows.
• Build identity telemetry pipelines for real-time monitoring and detection.

Privileged Access & Access Control

• Design and deploy enterprise-grade PAM for infrastructure and production systems.
• Enforce just-in-time privileged access with full session recording and auditability.
• Implement strong segregation of duties and least-privilege enforcement through code and automation.
• Harden service account governance and non-human identity management.

Enterprise, SaaS & Data Protection Security

• Secure enterprise SaaS platforms through configuration baselines and API integrations.
• Implement shadow IT discovery and enforcement mechanisms.
• Build automated compliance checks for SaaS security posture.
• Engineer secure access controls across collaboration, source code, and productivity platforms.
• Implement DLP controls across endpoints, SaaS, and cloud storage.

Detection, Infrastructure Integration & Leadership

• Build insider threat detection logic tied to identity behavior and anomalous activity.
• Engineer alerting pipelines for data exfiltration attempts and integrate privileged activity signals into SOC detection pipelines.
• Partner with Platform Security and Engineering to secure access to Kubernetes, cloud consoles, APIs, and CI/CD systems.
• Embed identity enforcement into infrastructure-as-code pipelines and validate identity isolation across tenant environments.
• Build and lead the Enterprise Security & Identity engineering team, recruit senior identity security engineers, and drive the long-term identity modernization roadmap.

KPIs

• Zero Trust identity architecture implementation progress
• Standing privilege reduction through JIT access adoption
• Identity risk exposure and control effectiveness
• Detection and response coverage for insider risk and data exfiltration

About You

• 12+ years of experience in identity security and enterprise security engineering roles.
• Deep hands-on expertise with modern IAM platforms such as Okta and Entra ID.
• Strong knowledge of federation protocols including SAML, OIDC, and OAuth.
• Experience with conditional access, device trust models, and Privileged Access Management systems.
• Proven ability to engineer automation around access control, access reviews, and enforcement.
• Experience designing identity architecture in cloud or hyperscale environments.
• Strong understanding of cloud-native identity controls across AWS/GCP IAM.
• Solid knowledge of insider threat methodologies and DLP technologies.
• Experience leading technical engineering teams in a hands-on, architecture-led capacity.
• Comfortable designing systems from first principles, challenging weak access models, and focusing on automation, scalability, and measurable risk reduction.

What we can offer you

At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.

Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. 🚀

Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨

Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support.

Human-First Flexibility: We treat you as humans first. 🫶🏽 Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.

Equal Opportunities Statement

We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.

If there’s anything we can do to accommodate your specific situation, please let us know.

The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.

Salary Range

The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.