Sr. IAM Engineer

SR. IAM ENGINEER

We are looking for an Identity and Access Management (IAM) Engineer to play a critical role in designing, implementing, and maturing our enterprise IAM ecosystem. As a Senior IAM Engineer, you will serve as a key subject matter expert (SME) within the broader Information Security organization, driving secure, scalable, and user-friendly identity solutions in a fast-paced, high-growth environment. You will own complex IAM initiatives end-to-end — from strategy and architecture to implementation and optimization — while collaborating closely with Security, Infrastructure, Application, and Engineering teams. This is a high-impact, hands-on role suited for someone who thrives in ambiguity and takes extreme ownership of outcomes.

This high-visibility role requires the ability to thrive in a fast-paced and ambiguous environment. The ideal candidate demonstrates extreme ownership, a collaborative no-ego mindset, and is comfortable taking the lead. This is a significant opportunity to shape the future of identity and security at the company.

RESPONSIBILITIES:

Design and implement enterprise-grade IAM solutions across on-prem, cloud, and SaaS environments

Architect and deliver end-to-end federation strategies using modern protocols (SAML, OIDC, OAuth 2.0, SCIM)

Lead integration and optimization of key IAM platforms including SailPoint, Okta, PingOne, Microsoft Entra ID, and other tools

Drive Identity Lifecycle Management (LCM), Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Just-In-Time access initiatives

Develop automation scripts and Infrastructure as Code (Terraform) to improve provisioning, governance, and operational efficiency

Serve as the primary IAM SME, providing technical guidance, troubleshooting complex issues, and mentoring other team members

Work closely with InfoSec, Compliance, and Engineering teams to meet audit, regulatory, and security requirements

Continuously improve IAM architecture, processes, and capabilities in a dynamic, fast-moving organization

Support cloud IAM strategies across AWS, GCP, and other platforms

Participate in on-call rotation and incident response related to identity systems

BASIC QUALIFICATIONS:

5+ years of hands-on experience in Identity and Access Management (IAM)

PREFERRED SKILLS AND EXPERIENCE:

Thorough understanding of IAM principles and modern security concepts, including Zero Trust, Least Privilege, Adaptive/Risk-Based Authentication, Attribute-Based Access Control (ABAC), Continuous Access Evaluation, and Identity Threat Detection and Response (ITDR)

Strong expertise in IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM, and other federation protocols

Strong expertise in IAM and federation protocols, with proven experience in architecting and implementing end-to-end federation solutions

Hands-on experience with major IAM platforms, particularly SailPoint, Okta, PingOne, and Microsoft identity solutions

Strong working knowledge of cloud platforms (AWS and GCP), Cloud IAM services, Terraform, and CI/CD practices

Strong scripting and programming skills in Python and JavaScript/TypeScript, with extensive experience developing IAM workflows, automation, and integrations

Demonstrated ability to lead technical initiatives and drive projects from design through implementation

COMPENSATION AND BENEFITS:

$152,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.