• You'll own workforce identity and endpoint security end to end: the architecture, the automation, and the day-to-day. • The centrepiece is making our HRIS the single source of truth for identity — when someone is hired, changes role, or leaves, the right access should appear or disappear without a ticket, and we should be able to prove it to an auditor. • This is a hands-on Lead-level IC role. • You'll design the model and also build it. • Design and build joiner/mover/leaver automation driven by our HRIS (Workable). This means building the integration — mapping employment events to identity actions via the Workable API, Okta Workflows, and middleware where needed. • Own the entitlement model: which groups, roles, and attributes determine access to what, and how role changes propagate. • Handle the cases that break naive automation — contractors and EOR workers, future-dated changes, internal transfers, rehires, leaves of absence, and country-specific variations in how employment is recorded. • Own how access is granted, reviewed, and revoked across our core SaaS estate: Okta, Google Workspace, Slack, Confluence/Jira, Workable, our HRIS, and the long tail of ~20 other apps. • Run access reviews and certification campaigns that hold up under SOC 2 and ISO 27001 audit, ideally on a modern IGA platform rather than in spreadsheets. • Build self-service request-and-approval flows so access requests stop being Slack DMs. • Bring the long tail under management — including the apps with no SCIM support, where you'll need an API, a script, or a documented manual control. • Own our device fleet in Jamf (macOS)]: baseline configuration, patch and OS-update compliance, disk encryption, and fleet visibility, working with our external global tech provider and partner. • Tie device posture to access — Okta Device Trust or equivalent — so sensitive apps are reachable only from managed, compliant devices. • Own secure remote access to internal systems (we are considering Tailscale and Cloudflare Zero Trust), and improve on it. Our people are everywhere; VPN-shaped solutions that assume an office don't fit us. • Be the identity and endpoint interface for SOC 2 and ISO 27001 — evidence, control design, auditor questions. • Instrument the above: alerting on suspicious authentication, MFA changes, privilege escalation, and drift in device compliance. • Write the runbooks. Make the offboarding path fast and provable, because that's the control auditors and customers ask about first.

• Regularly adapting our systems stack to support the latest hardware platforms and technologies. • Developing and maintaining performance improvements and customer-facing capabilities – based on both business requirements and engineering needs. • Building and operating reliable, comprehensive deployment automation and validation processes. • Ensuring that our systems provide sufficient observability across the entire stack. • Supporting customers with complex technical issues that prevent them from fully utilizing Nebius Cloud GPU and CPU capacity. • Participating in every major hardware bring-up at Nebius, delivering critical platform enablers and conducting comprehensive system validations.

• Assist in building components of the Aedeon agent fleet parsers, extractors, dependency mappers, test synthesizers under senior engineer guidance. • Learn how agents operate against the Code Intelligence Graph so every action traces back to a line of code. • Get exposure to governed autonomy stages (shadow, supervised, autonomous) and the human-in-the-loop controls at each stage. • Shadow how the team orchestrates foundation models (Anthropic, OpenAI, Google) through the Aedeon Decision Model. • Practice writing tests before code, for the small pieces of functionality you own. • Help build behavior-equivalence checks comparing agent output against expected results. • Contribute to test cases covering functional flows and edge cases, with mentor review before anything ships. • Get hands-on with pytest and the team's CI/CD-integrated test suites. • Write clear, readable Python and submit pull requests for review. • Document what you build in Confluence or equivalent clearly enough that a teammate can pick it up without asking you first.

• Interact directly with our Federal customer and set priorities on a weekly basis, advising them on best practices and supporting governance initiatives across the organization. • Responsible for achieving a high degree of customer satisfaction. • Provide technical knowledge and analysis of highly specialized applications and operational environment. • Apply principles, methods and knowledge of the functional area of capability to specific task order requirements. • Assist other senior consultants with analysis and evaluation and with the preparation of recommendations for system improvements, optimization, development, and/or maintenance efforts.