Senior IAM Engineer

Details

SpaceXAI is seeking a Senior Identity and Access Management (IAM) Engineer to design, implement, and mature its enterprise IAM ecosystem. The role serves as a subject matter expert within the Information Security organization and owns complex IAM initiatives from strategy and architecture through implementation and optimization. The position involves close collaboration with Security, Infrastructure, Application, and Engineering teams in a fast-paced, high-growth environment.

Responsibilities

• Design and implement enterprise-grade IAM solutions across on-premises, cloud, and SaaS environments.
• Architect and deliver end-to-end federation strategies using SAML, OIDC, OAuth 2.0, SCIM, and other federation protocols.
• Lead integration and optimization of SailPoint, Okta, PingOne, Microsoft Entra ID, and other IAM tools.
• Drive Identity Lifecycle Management (LCM), Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Just-In-Time access initiatives.
• Develop automation scripts and Infrastructure as Code using Terraform to improve provisioning, governance, and operational efficiency.
• Serve as the primary IAM subject matter expert, providing technical guidance, troubleshooting complex issues, and mentoring team members.
• Collaborate with Information Security, Compliance, and Engineering teams to meet audit, regulatory, and security requirements.
• Continuously improve IAM architecture, processes, and capabilities.
• Support cloud IAM strategies across AWS, GCP, and other platforms.
• Participate in an on-call rotation and incident response related to identity systems.

Requirements

• 6+ years of hands-on Identity and Access Management experience.
• Thorough understanding of IAM principles and modern security concepts, including Zero Trust, Least Privilege, Adaptive/Risk-Based Authentication, Attribute-Based Access Control (ABAC), Continuous Access Evaluation, and Identity Threat Detection and Response (ITDR).
• Strong expertise in IAM protocols and standards, including SAML, OIDC, OAuth 2.0, and SCIM.
• Proven experience architecting and implementing end-to-end federation solutions.
• Hands-on experience with SailPoint, Okta, PingOne, and Microsoft identity solutions.
• Strong working knowledge of AWS, GCP, cloud IAM services, Terraform, and CI/CD practices.
• Strong scripting and programming skills in Python and JavaScript/TypeScript, with extensive experience developing IAM workflows, automation, and integrations.
• Demonstrated ability to lead technical initiatives and drive projects from design through implementation.
• Ability to work effectively in a fast-paced and ambiguous environment, demonstrate ownership, collaborate effectively, and take the lead.

Compensation And Benefits

• Base salary: $100,000–$258,000 USD per year.
• Equity.
• Comprehensive medical, vision, and dental coverage.
• 401(k) retirement plan.
• Short- and long-term disability insurance.
• Life insurance, discounts, and other perks.
• Equal opportunity employer.