Enterprise Security Engineer - IAM & Compliance

Pave; San Francisco (CA); Hybrid; USD 220,000 - 260,000; Full time

Benefits offered by this job

Health coverage

Flexible PTO

Meal stipends

Education stipend

Parental leave

Commuter stipend

Job summary

Pave is hiring a Corporate Security Engineer to own identity and access management, endpoint protection, and SaaS security across a growing global team. You will automate SOC2/ISO27001 controls and build AI-powered processes that reduce toil while strengthening governance.

You’ll partner with IT and the helpdesk to design scalable security systems, mentor junior staff, and drive proactive security improvements across five locations and regional hubs.

Qualifications

• 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company.
• Okta (or equivalent IdP) administration at the design level — you've built an access model, not just operated one
• Experience operating within SOC2 and/or ISO27001: controls you owned passed audits
• Hands-on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
• A track record of shipped automations with concrete before/after impact
• Demonstrated, specific use of AI tooling in your own workflows

Responsibilities

• Identity & Access Management: Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
• Compliance Operations: Own the SOC2 TypeII and ISO27001 controls that touch corporate IT, end to end
• Endpoint & SaaS Security: Own endpoint protection across a five-location, ~175-person company; run SaaS vendor security reviews and feed data sources into our SIEM
• Automation & AI: Engineer away manual IT toil— laptop setup, onboarding/offboarding provisioning, access requests— using APIs, workflow tooling, and AI agents
• Partnership: Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient

Skills

Identity & Access Management

Okta Administration

SOC 2 & ISO 27001

MDM/EDR Management

SaaS Security Administration

Automation & AI in IT

AI tooling usage

Tools

Okta

GCP

Google Workspace

SIEM

SentinelOne

Claude code

Cloud security tools

Job description

Pave is hiring a Corporate Security Engineer to own identity and access management, endpoint protection, and SaaS security across a growing global team. You will automate SOC2/ISO27001 controls and build AI-powered processes that reduce toil while strengthening governance.

You’ll partner with IT and the helpdesk to design scalable security systems, mentor junior staff, and drive proactive security improvements across five locations and regional hubs.