Senior IT Enterprise Security Engineer

NVIDIA is looking for an outstanding IT Engineer to join our Enterprise Security Team. This is a hands-on engineering role for someone who wants to build, automate, and operate the identity platforms that secure NVIDIA — and who is excited about using AI to make our infrastructure more visible, more stable, and easier for our users to work with. You will operate, automate, and maintain our Identity and Directory platforms, and implement the capabilities that move us toward a Zero Trust future. You will work day-to-day with IT, Cybersecurity, and business technologists to deliver on our IAM roadmap and keep our hybrid identity environment secure, simple, and stable. Do you want the opportunity to build an extraordinary user experience that delivers on both securing our company and enabling our company to move at the speed of light?

What you'll be doing:

Be a key member of the Global Identity and Access Management (IAM) team, with a focus on Active Directory and Entra ID.

Operate and continuously improve our hybrid AD/Entra ID environment with a focus on security, simplicity, and stability — including upgrades, incidents, and third-party integrations.

Implement identity security capabilities that support NVIDIA's enterprise Zero Trust architecture, including SSO, conditional access, MFA, and privileged access.

Build automation and agentic workflows for identity lifecycle, access requests, directory hygiene, and service account governance — reducing manual toil and improving the end-user experience.

Implement identity and access controls for agentic and non-human identities (NHI) — service accounts, workload identities, machine credentials, and AI agents — covering provisioning, scoping, credential rotation, and lifecycle cleanup.

Apply AI tooling to improve infrastructure visibility and stability: telemetry, health checks, anomaly detection, and AI-assisted diagnostics that surface issues before users report them and give end users faster, self-service resolution.

What we need to see:

B.Sc. or M.Sc. in Computer Science or related field, or equivalent professional experience, with 5+ years of hands-on Active Directory experience and 2+ years with Entra ID / Azure AD in a hybrid environment.

Solid understanding of core IAM concepts: single sign-on, multifactor authentication, conditional access, federation, privileged account management, secrets and password vaulting, and Zero Trust principles.

Hands-on scripting and automation skills in PowerShell or similar, plus practical experience using AI tools in day-to-day engineering work.

A strong security mentality, with the ability to quickly learn and adapt to new technologies.

Excellent interpersonal skills and hands-on experience collaborating with global teams.