{"id":3627367,"url":"https://alion.io/job/nscale-staff-security-engineer-privileged-access-pam","title":"Staff Security Engineer, Privileged Access (PAM)","company":{"id":48155,"name":"Nscale","domain":"nscale.com","url":"https://alion.io/company/nscale","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":90,"open_postings":26,"ghost_share":0,"stale_share":0.385,"repost_share":0.038,"time_to_fill_p50_days":56,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":175000,"max":225000,"currency":"USD","period":"year","gross":null,"usd_annual":225000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Least Privilege","optional":false},{"name":"Platform Engineering","optional":false}],"status":"live","first_seen_at":"2026-05-27T17:28:51Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T05:53:16Z","board_verified":true,"closed_at":null,"days_open":160,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":160},"description":"About Nscale\nNscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.\nWe thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.\nAbout the Role\nWe’re hiring a Staff Security Engineer focused on Privileged Access and Access Automation to build Nscale’s privileged access operating model across enterprise systems, SaaS administration, infrastructure, production environments, source control, data platforms, and emergency access paths.\nThis role sits inside the identity control plane and is intentionally execution-focused. You’ll work across Identity, Endpoint, Security Data, Network Security, Platform Engineering, IT, and service owners to turn privileged access into a practical engineering mechanism with request, approval, justification, time-bound elevation, session or event evidence, automated revocation, break-glass, and clean audit trails.\nThis role is critical because standing privilege is one of the highest-risk patterns in a fast-growing infrastructure company. Your work will help make privileged access secure, fast, measurable, and recoverable so engineers can move quickly without relying on manual reviews, tribal knowledge, or permanent admin rights.\nWhat you'll be doing\nPrivileged Access Workflows\nBuild privileged access workflows across enterprise SaaS admin roles, production systems, cloud consoles, infrastructure management systems, source control, data platforms, endpoint admin, and emergency access paths\nDesign access patterns that support request, approval, justification, time-bound elevation, and automated revocation\nDefine practical controls that reduce reliance on permanent admin rights across high-risk environments\nEstablish clean audit trails for privileged access activity across critical systems\nJIT Access and Governance Controls\nImplement JIT access patterns with approval, justification, expiry, revocation, and evidence collection\nCreate a privileged access baseline that defines who can approve access, what justification is required, how long access lasts, what evidence is captured, and how revocation works\nOwn exception governance for access paths that cannot yet meet the standard\nDrive entitlement cleanup and stale privilege reduction through automation\nBreak-Glass and Tiering Model\nDesign break-glass access standards, ownership models, monitoring, and recovery procedures\nTest emergency access workflows and validate break-glass readiness\nDevelop a tiering model for privileged access covering Tier 0 and Tier 1 systems, admin paths, sensitive groups, service-owner roles, and high-risk workflows\nIdentify the top 10 highest-risk standing privileges and create remediation paths\nTelemetry, Detection, and Measurement\nDefine privileged access telemetry requirements for detection, investigations, audit, compliance, and executive reporting\nPartner with Security Data to establish privileged access detections and source-health requirements\nTrack metrics including standing privilege reduction, JIT adoption, stale admin cleanup, break-glass test success, approval SLA, and access review closure\nBuild an inventory of top admin paths, owners, approvers, access methods, logging, expiry, and current risk\nKPIs\nStanding privilege reduction\nJIT adoption\nStale admin cleanup\nBreak-glass test success\nAbout You\n7+ years in identity security, privileged access, security engineering, infrastructure security, or related engineering roles\nHands-on experience designing or operating privileged access, JIT, break-glass, access request, approval, or access review workflows\nStrong understanding of authentication, authorization, RBAC, SSO, MFA, access governance, admin tiering, and least privilege\nExperience automating access workflows, entitlement cleanup, evidence collection, or revocation processes\nStrong scripting, workflow automation, API integration, or platform engineering skills\nAbility to translate access risk into practical controls that engineering and operations teams will adopt\nAbility to work across enterprise systems, production environments, SaaS platforms, IT, infrastructure, and compliance stakeholders\nExperience with service accounts, non-human identities, workload identities, API tokens, automation accounts, or secrets governance\nExperience securing production access, source control administration, data platforms, cloud administration, or endpoint admin workflows\nExperience designing access evidence for audit, customer assurance, or incident response\nWhat we can offer you\nAt Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.\nHighly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \nJoin one of the fastest-growing AI infrastructure companies - your chance to directly shape how global AI capacity is planned and deployed. \nExpect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy - always with our full support.\nHuman-First Flexibility: We treat you as humans first. Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.\nEqual Opportunities Statement\nWe strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.\nIf there’s anything we can do to accommodate your specific situation, please let us know.\nThe responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.\nFor information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.\nSalary Range\nThe range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.\nThe range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.\nSalary Range\n$175,000—$225,000 USD\nFor information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.\nNscale does not accept unsolicited candidate submissions from recruitment agencies.","description_format":"text","description_chars":7835,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Parental leave","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Centers & Colocation","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-11-02T20:00:03Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.663,"p_room":0.28,"age_days":160,"expected_fill_days":56,"reasons":["conf:0","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":225000,"is_top_pay":true},"html_url":"https://alion.io/job/nscale-staff-security-engineer-privileged-access-pam","json_url":"https://alion.io/job/nscale-staff-security-engineer-privileged-access-pam.json","meta":{"generated_at":"2026-11-04T08:52:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13811,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48155},"rest":"https://alion.io/mcp/rest/get_company?id=48155"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnscale-staff-security-engineer-privileged-access-pam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnscale-staff-security-engineer-privileged-access-pam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnscale-staff-security-engineer-privileged-access-pam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nscale-staff-security-engineer-privileged-access-pam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnscale-staff-security-engineer-privileged-access-pam"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3627367}},{"tool":"search_jobs","arguments":{"company":"nscale.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3627367},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}