This role sits within the Enterprise Identity & Access Management (IAM) and Security Engineering team, responsible for securing privileged and non-human identities across enterprise systems. The team partners closely with Application Engineering, Infrastructure, Cloud Platform, and Security Operations teams to deliver scalable identity security solutions. You will lead a team of engineers while working cross-functionally to build modern, API-driven credential management platforms aligned with enterprise security strategy.
WHO WE ARE LOOKING FORWe are looking for a hands-on engineering leader with deep expertise in privileged identity, credentials, and non-human identity management. The ideal candidate brings a strong foundation in software engineering combined with practical experience designing and operating enterprise security platforms. This role requires someone who can both drive strategic direction and actively contribute to building new solutions from the ground up.
You should be comfortable working across the full lifecycle—from architecture and design to engineering and operations—while handling sensitive credential systems with a strong security-first mindset.
Key skills & experience:Strong experience in Privileged Access Management (PAM) platforms (CyberArk, Cerberus or similar)
Deep understanding of Non-Human Identities (NHI):
service accounts
API keys
machine identities
Experience building or integrating enterprise credential management platforms
Solid software engineering background:
Java / Python / Go (preferred)
API-driven architectures
microservices / distributed systems
Strong understanding of:
secrets management
certificate lifecycle management (PKI)
identity governance principles
10+ years of experience in IAM / Security Engineering / Platform Engineering
Proven experience in Delevering Scalable, Secure and Efficient solutions
Experience with cloud platforms (AWS / Azure / GCP)
Bachelor’s degree or equivalent experience in Engineering / Computer Science / Security
You will lead the design, development, and modernisation of enterprise credential and privileged identity capabilities. This includes both enhancing existing PAM platforms (CyberArk, Cerberus) and building next-generation credential security solutions aligned with Non-Human Identity governance.
Key responsibilities:Lead engineering and roadmap for Credentials & Privileged Access function
Design and build next-generation credential management platform
Modernise and integrate CyberArk / Cerberus ecosystem
Develop solutions for:
non-human identity lifecycle management
secrets orchestration
certificate lifecycle automation
Establish secure access patterns for applications, APIs, and infrastructure
Define and enforce credential security standards and controls
Partner with:
IAM governance teams
platform engineering
cloud security
Enable secure integration with:
applications
DevOps pipelines
AI/agent platforms (future-looking)
Mentor and lead a team of engineers, driving both delivery and capability growth
Skills Required
- 10+ years of experience in IAM, security engineering, or platform engineering
- Strong experience with Privileged Access Management platforms such as CyberArk, Cerberus, or similar
- Deep understanding of non-human identities, including service accounts, API keys, and machine identities
- Experience building or integrating enterprise credential management platforms
- Strong software engineering background
- Experience with Java, Python, or Go
- Experience with API-driven architectures, microservices, and distributed systems
- Understanding of secrets management, certificate lifecycle management, PKI, and identity governance
- Experience with AWS, Azure, or GCP
- Proven experience delivering scalable, secure, and efficient solutions
- Bachelor's degree or equivalent experience in engineering, computer science, or security
Nike Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Nike and has not been reviewed or approved by Nike.
-
Retirement Support — A 401(k) with a company match is complemented by options such as a Mega Backdoor Roth and deferred compensation for eligible earners. Financial coaching and structured savings programs support long-term financial security.
-
Equity Value & Accessibility — An Employee Stock Purchase Plan with a stock discount sits alongside broad-based equity vehicles like RSUs and non-qualified stock options. These avenues expand wealth-building opportunities beyond base pay.
-
Parental & Family Support — Paid parental leave includes maternity and paternity time, recently expanded in the U.S. to 16 weeks and extended to part-time retail teammates. Additional supports include childcare assistance at select locations and family-building benefits such as fertility, surrogacy, and adoption.
Nike Insights
What We Do
At NIKE, Inc., we innovate to serve athletes*. Every teammate - from coder to creator - plays a role in making these athletes’ dreams real. Our tech, data, and digital teams push limits every day, building the future of sport and the tools that drive it. Here, curiosity is fuel. Innovation is the game plan. Different perspectives keep us on the offense. You’ll solve challenges worth tackling, grow fast and belong to a team that backs you to do the right thing. Bring your drive. Bring your bold. Let’s move the world, together. Take your first step at nike.com/careers * If you have a body, you’re an athlete.
Why Work With Us
At NIKE, Inc., your dedication fuels the future of sport. There is a sense of pride that comes from representing an iconic brand and shaping its future. Here, we treat every day as a new opportunity to push boundaries, ask tough questions and share whole-hearted convictions. We are a team – united by the belief that anything is possible.
Gallery
