Enterprise Security Engineer

Pave; San Francisco (CA); Hybrid; USD 210,000 - 240,000; Full time

Benefits offered by this job

Equity

Medical, dental, vision

Flexible PTO

Hybrid work model

Education stipend

Parental leave

Commuter stipend

Team Sync Fridays

Job summary

Pave, headquartered in San Francisco, seeks a Corporate Security Engineer to own identity and access management, endpoint protection, SaaS security, and corporate compliance operations behind SOC 2 Type II and ISO 27001. You will automate governance across multiple locations and helpdesk processes with AI-powered tooling.

You bring 5+ years of enterprise security, design-level Okta administration, and experience with SOC 2/ISO 27001.

Qualifications

• 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company.
• Okta (or equivalent IdP) administration at the design level — you\'ve built an access model, not just operated one
• Experience operating within SOC 2 and/or ISO 27001: controls you owned passed audits
• Hands-on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
• A track record of shipped automations with concrete before/after impact
• Demonstrated, specific use of AI tooling in your own workflows
• Previous management experience (nice to have)
• Came up through IT/helpdesk into security (or similar path), so you have empathy for the people you\’re supporting and first hand experience with the toil you\’re here to automate away
• Experience with Okta, GCP, Iru, Sentinel one, Claude code, and or similar tools
• Vendor security review / third-party risk experience (nice to have)
• Background at a 150–500 person B2B SaaS company handling sensitive data (nice to have)
• Networking fundamentals

Responsibilities

• Identity & Access Management — Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
• Keep the RBAC model current and consistently enforced, with automation that prevents drift
• Compliance Operations — Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end
• Automate evidence collection and user access reviews
• Endpoint & SaaS Security — Own endpoint protection (MDM/EDR) across a five-location, ~175-person company
• Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM
• Automation & AI — Engineer away manual IT toil — laptop setup, onboarding/offboarding provisioning, access requests — using APIs, workflow tooling, and AI agents
• Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models
• Partnership — Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient

Skills

Okta admin

IAM design

SOC 2 controls

ISO 27001

MDM/EDR

SaaS security

AI tooling

GCP

RBAC automation

Vendor risk

Networking fundamentals

Tools

Okta

GCP

SentinelOne

Claude

MDM

SIEM

Job description

At Pave, we're building the industry's leading compensation platform, combining the world's largest real-time compensation dataset with deep expertise in AI and machine learning. Our platform is perfecting the art and science of pay to give 9,000+ companies unparalleled confidence in every compensation decision.

Top tier companies like OpenAI, McDonald’s, Instacart, Atlassian, affirm, Ericsson, Synopsys, Stripe, Databricks, and Waymo use Pave, transforming every pay decision into a competitive advantage. $190+ billion in total compensation spend is managed in our workflows, and 80% of Forbes AI 50 use Pave to benchmark compensation.

The future of pay is real-time & predictive, and we’re making it happen right now. We’ve raised $175M in funding from leading investors like Andreessen Horowitz (a16z), Index Ventures, Y Combinator, Insight Partners, Atomico, Venture Partners, and Craft Ventures.

Who We Are

At Pave, we're building the industry's leading compensation platform, combining the world's largest real-time compensation dataset with deep expertise in AI and machine learning. Our platform is perfecting the art and science of pay to give 9,000+ companies unparalleled confidence in every compensation decision.

Top tier companies like OpenAI, McDonald’s, Instacart, Atlassian, affirm, Ericsson, Synopsys, Stripe, Databricks, and Waymo use Pave, transforming every pay decision into a competitive advantage. $190+ billion in total compensation spend is managed in our workflows, and 80% of Forbes AI 50 use Pave to benchmark compensation.

The future of pay is real-time & predictive, and we’re making it happen right now. We’ve raised $175M in funding from leading investors like Andreessen Horowitz (a16z), Index Ventures, Y Combinator, Insight Partners, Atomico, Venture Partners, and Craft Ventures.

The Security Team @ Pave

Security at Pave protects the world's largest real-time compensation dataset and the company that runs on it. The team is small, senior, and AI pilled: everyone builds, everyone automates, and everyone flexes across domains. As Pave's Corporate Security Engineer, you'll own the corporate side of that mission: identity and access management, endpoint protection, SaaS security, and the corporate compliance operations behind our SOC 2 Type II and ISO 27001 programs, with an explicit charter to aggressively automate all the things.

What You'll Do

• Identity & Access Management
  • Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
  • Keep the RBAC model current and consistently enforced, with automation that prevents drift
• Compliance Operations
  • Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end
  • Automate evidence collection and user access reviews
• Endpoint & SaaS Security
  • Own endpoint protection (MDM/EDR) across a five-location, ~175-person company
  • Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM
• Automation & AI
  • Engineer away manual IT toil — laptop setup, onboarding/offboarding provisioning, access requests — using APIs, workflow tooling, and AI agents
  • Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models
• Partnership
  • Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient

What You'll Bring

• 5+ years of hands‑on corporate/enterprise security or IT security engineering experience at a multi-office company
• Okta (or equivalent IdP) administration at the design level — you've built an access model, not just operated one
• Experience operating within SOC 2 and/or ISO 27001: controls you owned passed audits
• Hands‑on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
• A track record of shipped automations with concrete before/after impact
• Demonstrated, specific use of AI tooling in your own workflows
• Previous management experience (nice to have)
• Came up through IT/helpdesk into security (or similar path), so you have empathy for the people you’re supporting and first hand experience with the toil you’re here to automate away
• Experience with Okta, GCP, Iru, Sentinel one, Claude code, and or similar tools
• Vendor security review / third-party risk experience (nice to have)
• Background at a 150–500 person B2B SaaS company handling sensitive data (nice to have)
• Networking fundamentals

Compensation, It's What We Do.

At Pave, we believe compensation should be as thoughtful as the people we hire. Your total rewards package includes meaningful equity, best-in-class medical, dental, and vision coverage, unlimited PTO, and region‑specific benefits designed around your life — not just your role. Your level and compensation are determined by your experience and how you show up throughout the interview process. We're always happy to walk you through how we think about leveling — just ask.

The targeted cash compensation for this position is (level depends on experience):
$220,000+(base) and equity included

Benefits @ Pave

At Pave, growth isn't a perk — it's the point. As you develop, your role expands, your responsibilities deepen, and your compensation reflects the impact you're making.

What we offer

• Your Health, Fully Covered: Comprehensive medical, dental, and vision coverage for you and your family, with a range of options designed to meet you where you are.
• Time That's Actually Yours: Flexible PTO and the freedom to work from anywhere in the world for up to a month — because life doesn't pause, and neither should you.
• Fuel for the Work: Lunch and dinner stipends plus fully stocked kitchens, so you can stay energized without thinking twice about it.
• Room to Keep Growing: A quarterly education stipend to invest in the skills and knowledge that matter most to you.
• Support When It Matters Most: Robust parental leave so you can be fully present for the moments that count.
• Getting Here, Made Easier: A commuter stipend to support the in‑person collaboration that makes great work happen.

Life @ Pave

Founded in 2019 with a clear purpose and a team that has never wavered from it, Pave has grown into a global force in compensation management — giving thousands of companies the tools to take control, build confidence, and earn credibility in every pay decision they make. And we're just getting started. Headquartered in San Francisco's Financial District, with regional hubs in New York City's Flatiron District, Salt Lake City, Kraków (Poland), and the United Kingdom — wherever you're based, you'll find the same thing: people who genuinely care about the work, each other, and the customers that rely on Pave.

We run a hybrid culture that brings teams together in person 3 to 4 days a week — and every Friday, the whole company gathers for our Team Sync: breakfast, new hire welcomes, product updates, fireside chats, and yes, the occasional Kahoot. It's one of the things people notice when they join us — that we truly enjoy spending time together.

Our culture is shaped by five values we live every day:

• Be Intellectually Honest — Truth over comfort. We face reality clearly and speak directly, even when it's hard.
• Play to Win — We're not here to participate. We're here to be the #1 compensation platform in the world, and we act like it.
• Uphold the Pave Platinum Standard — We hold ourselves to the highest bar — for our customers, our data, and each other.
• One Team — We win and lose together. Titles don't drive decisions here — shared goals do.
• Hug of Jawn — Hard to define, impossible to miss. Ask your recruiter.

Our Vision: Unlock a labor market built on trust.

Our Mission: Build confidence in every compensation decision.

We build software that transforms how companies pay their people — and we believe the team behind that software deserves the same thoughtfulness. If you're ready to help shape the future of compensation alongside people who are smart, humble, and genuinely motivated by the problem we're solving, we'd love to meet you.