Senior IT Enterprise Security Engineer

Responsibilities

• Be a key member of the Global Identity and Access Management (IAM) team, with a focus on Active Directory and Entra ID.
• Operate and continuously improve our hybrid AD/Entra ID environment with a focus on security, simplicity, and stability — including upgrades, incidents, and third-party integrations.
• Implement identity security capabilities that support NVIDIA's enterprise Zero Trust architecture, including SSO, conditional access, MFA, and privileged access.
• Build automation and agentic workflows for identity lifecycle, access requests, directory hygiene, and service account governance — reducing manual toil and improving the end-user experience.
• Implement identity and access controls for agentic and non-human identities (NHI) — service accounts, workload identities, machine credentials, and AI agents — covering provisioning, scoping, credential rotation, and lifecycle cleanup.
• Apply AI tooling to improve infrastructure visibility and stability: telemetry, health checks, anomaly detection, and AI-assisted diagnostics that surface issues before users report them and give end users faster, self-service resolution.
• What we need to see
• B.Sc. or M.Sc. in Computer Science or related field, or equivalent professional experience, with 5+ years of hands-on Active Directory experience and 2+ years with Entra ID / Azure AD in a hybrid environment.
• Solid understanding of core IAM concepts: single sign-on, multifactor authentication, conditional access, federation, privileged account management, secrets and password vaulting, and Zero Trust principles.
• Hands-on scripting and automation skills in PowerShell or similar, plus practical experience using AI tools in day-to-day engineering work.

Languages