Lead Information Security Engineer - ITC

This role sits within the Enterprise Identity & Access Management (IAM) and Security Engineering team, responsible for securing privileged and non-human identities across enterprise systems. The team partners closely with Application Engineering, Infrastructure, Cloud Platform, and Security Operations teams to deliver scalable identity security solutions. You will lead a team of engineers while working cross-functionally to build modern, API-driven credential management platforms aligned with enterprise security strategy.

Who We Are Looking For

We are looking for a hands-on engineering leader with deep expertise in privileged identity, credentials, and non-human identity management. The ideal candidate brings a strong foundation in software engineering combined with practical experience designing and operating enterprise security platforms. This role requires someone who can both drive strategic direction and actively contribute to building new solutions from the ground up.

You should be comfortable working across the full lifecycle—from architecture and design to engineering and operations—while handling sensitive credential systems with a strong security-first mindset.

Key Skills and Experience

• Strong experience in Privileged Access Management (PAM) platforms, including CyberArk, Cerberus, or similar
• Deep understanding of non-human identities, including service accounts, API keys, and machine identities
• Experience building or integrating enterprise credential management platforms
• Strong software engineering background in Java, Python, or Go
• Experience with API-driven architectures, microservices, and distributed systems
• Strong understanding of secrets management, certificate lifecycle management (PKI), and identity governance principles

Required Qualifications

• 10+ years of experience in IAM, Security Engineering, or Platform Engineering
• Proven experience delivering scalable, secure, and efficient solutions
• Experience with cloud platforms such as AWS, Azure, or GCP
• Bachelor’s degree or equivalent experience in Engineering, Computer Science, or Security

What You’ll Work On

You will lead the design, development, and modernization of enterprise credential and privileged identity capabilities. This includes enhancing existing PAM platforms such as CyberArk and Cerberus and building next-generation credential security solutions aligned with non-human identity governance.

• Lead engineering and roadmap for the Credentials & Privileged Access function
• Design and build a next-generation credential management platform
• Modernize and integrate the CyberArk and Cerberus ecosystem
• Develop solutions for non-human identity lifecycle management, secrets orchestration, and certificate lifecycle automation
• Establish secure access patterns for applications, APIs, and infrastructure
• Define and enforce credential security standards and controls
• Partner with IAM governance, platform engineering, and cloud security teams
• Enable secure integration with applications, DevOps pipelines, and AI or agent platforms
• Mentor and lead a team of engineers, driving delivery and capability growth

NIKE, Inc. offers a generous total rewards package, a casual work environment, a diverse and inclusive culture, and an atmosphere for professional development. NIKE, Inc. is an equal opportunity employer.