Product Manager - Secure & Govern

About Nominal

Engineers today are building some of the most ambitious machines humanity has ever seen. They should have AI that’s purpose-built for them.

Nominal is building the Hardware Intelligence Platform that gives engineers increased visibility into complex physical systems, helps them make better decisions, and ultimately gets their products into the real world faster. It brings together the systems, data, intelligence, and applications hardware engineering requires to meet the AI moment. Hardware engineering teams use Nominal to simulate, test, manufacture, and operate the physical systems that keep the world moving, from spacecraft and autonomous vehicles to next-generation energy systems and robotics.

Our customers span aerospace, defense, manufacturing, transportation, energy, and robotics. They include Anduril, Shield AI, Wisk Aero, Pratt Miller Motorsports, Antares, and Shinkei Systems, amongst others, alongside programs within the U.S. Air Force and Navy. Our team draws from SpaceX, Palantir, Anduril, Applied Intuition, Tesla, and other leading companies, united by a common mission: giving hardware engineers the tools to build the future with speed, safety, and confidence. We're a fast-moving team that owns problems end-to-end, works across disciplines, and thrives at the intersection of hardware and software.

Some of the world’s leading technology investors, including Sequoia, Lightspeed, Founders Fund, General Catalyst, Lux Capital, and Insight Partners, are backing Nominal’s ambition to change how machines are built and operated. We’re looking for engineers who want to take on hard problems and help make a new generation of world-changing hardware possible.

🧭 About the role

Enterprise customers run Nominal on critical hardware programs, and they need to trust how it secures, governs, and audits their data. This PM owns the end-to-end journey for administrators and enterprise teams as they secure, govern, and audit their Nominal environments, making powerful controls approachable so organizations can adopt and scale the platform with confidence.

This role is ideal for a PM who owns a complete feature or project end to end and enjoys turning ambiguous security requirements into usable experiences. You'll own the delivery of this area, and your scope can grow to shaping which security and governance problems we solve first.

🚀 What you'll do

• Own the roadmap and delivery for identity, SSO, authorization, RBAC, granular data access, auditability, governance, and administrative controls.
• Discover enterprise security and governance needs across personas, deployments, and compliance contexts, and turn them into prioritized work.
• Design coherent experiences across the console, APIs, documentation, and operational workflows, balancing least privilege, usability, performance, and deployment flexibility.
• Partner with Engineering, Sales, and other customer-facing teams to resolve the enterprise adoption blockers that matter most.
• Define and measure outcomes such as secure self-service configuration, control adoption, and less security-related onboarding friction.
• Explore AI-assisted administration while preserving strong controls and auditability.

🔍 We're looking for someone with

• Experience shipping at least one identity or access feature to production, such as SSO, role-based access, or audit logs.
• Prior ownership of a feature or workflow in an enterprise SaaS or platform product, from discovery through release and adoption.
• A background in enterprise products where security requirements shaped what you built, shown by a feature you scoped in response to a customer security or compliance need.
• A track record of writing requirements for administrator-facing features, in a console or API, that shipped.
• Experience defining success metrics for security or admin features and tracking them after launch.

⚡ Skills that supercharge us

• Experience shipping row- or column-level security or customer-managed keys, or building for government, defense, healthcare, or financial services customers.
• A background in products offered in hybrid, bring-your-own-cloud (BYOC), or self-hosted deployments.
• Hands-on support of a SOC 2 or ISO 27001 audit, or an enterprise procurement review.
• A track record of shipping the first enterprise security or access features, such as SSO or RBAC, for a product that had none.

✨ Benefits/Perks

• 🏥 100% coverage of medical, dental, and vision insurance
• 🏖️ Unlimited PTO and sick leave
• 🍽️ Free lunch, snacks, and coffee
• 🚀 Professional Development Stipend
• ✈️ Annual company retreat

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

ITAR Requirements

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.