IAM Engineer

VulnU; Austin, Palo Alto, Washington (TX, CA, District of Columbia); Presencial; USD 100.000 - 198.000; Tempo integral

Benefícios oferecidos por esta vaga

Equity

Flexible PTO

Resumo da vaga

SpaceX is seeking an IAM Engineer to design, implement, and mature our enterprise IAM ecosystem. You will own complex IAM initiatives end-to-end, from strategy and architecture to implementation and optimization, collaborating with Security, Infra, and Engineering teams.

The role focuses on federation, lifecycle management, RBAC, PAM, and Just-In-Time access, with hands-on work across AWS, GCP, and on-prem environments. Strong scripting and automation skills are essential.

Qualificações

• 3+ years of hands-on IAM experience.
• Strong understanding of IAM protocols: SAML, OIDC, OAuth 2.0, SCIM.
• Experience with enterprise IAM platforms and cloud IAM services.

Responsabilidades

• Design and implement enterprise IAM solutions across on-prem, cloud, and SaaS.
• Architect federation strategies using SAML, OIDC, OAuth 2.0, SCIM.
• Lead integration and optimization of SailPoint, Okta, PingOne, and Microsoft Entra ID.

Conhecimentos

IAM concepts

Zero Trust

RBAC

Python scripting

CI/CD practices

Ferramentas

SailPoint

Okta

PingOne

Microsoft Entra ID

Terraform

Descrição da vaga

# IAM EngineerxAI · x.aiCategory: Identity & Access ManagementLocation: Austin, TX; Palo Alto, CA; Washington, DCSalary: $100,000 – $198,000## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Equity* Flexible PTOSpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.IAM ENGINEERWe are looking for an Identity and Access Management (IAM) Engineer to play a critical role in designing, implementing, and maturing our enterprise IAM ecosystem. As a Senior IAM Engineer, you will serve as a key subject matter expert (SME) within the broader Information Security organization, driving secure, scalable, and user-friendly identity solutions in a fast-paced, high-growth environment. You will own complex IAM initiatives end-to-end — from strategy and architecture to implementation and optimization — while collaborating closely with Security, Infrastructure, Application, and Engineering teams. This is a high-impact, hands-on role suited for someone who thrives in ambiguity and takes extreme ownership of outcomes.This high-visibility role requires the ability to thrive in a fast-paced and ambiguous environment. The ideal candidate demonstrates extreme ownership, a collaborative no-ego mindset, and is comfortable taking the lead. This is a significant opportunity to shape the future of identity and security at the company.RESPONSIBILITIES:Design and implement enterprise-grade IAM solutions across on-prem, cloud, and SaaS environmentsArchitect and deliver end-to-end federation strategies using modern protocols (SAML, OIDC, OAuth 2.0, SCIM)Lead integration and optimization of key IAM platforms including SailPoint, Okta, PingOne, Microsoft Entra ID, and other toolsDrive Identity Lifecycle Management (LCM), Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Just-In-Time access initiativesDevelop automation scripts and Infrastructure as Code (Terraform) to improve provisioning, governance, and operational efficiencyServe as the primary IAM SME, providing technical guidance, troubleshooting complex issues, and mentoring other team membersWork closely with InfoSec, Compliance, and Engineering teams to meet audit, regulatory, and security requirementsContinuously improve IAM architecture, processes, and capabilities in a dynamic, fast-moving organizationSupport cloud IAM strategies across AWS, GCP, and other platformsParticipate in on-call rotation and incident response related to identity systemsBASIC QUALIFICATIONS:3+ years of hands-on experience in Identity and Access Management (IAM)PREFERRED SKILLS AND EXPERIENCE:Thorough understanding of IAM principles and modern security concepts, including Zero Trust, Least Privilege, Adaptive/Risk-Based Authentication, Attribute-Based Access Control (ABAC), Continuous Access Evaluation, and Identity Threat Detection and Response (ITDR)Strong expertise in IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM, and other federation protocolsStrong expertise in IAM and federation protocols, with proven experience in architecting and implementing end-to-end federation solutionsHands-on experience with major IAM platforms, particularly SailPoint, Okta, PingOne, and Microsoft identity solutionsStrong working knowledge of cloud platforms (AWS and GCP), Cloud IAM services, Terraform, and CI/CD practicesStrong scripting and programming skills in Python and JavaScript/TypeScript, with extensive experience developing IAM workflows, automation, and integrationsDemonstrated ability to lead technical initiatives and drive projects from design through implementationCOMPENSATION AND BENEFITS:$100,000 - $198,000 USDBase salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short long-term disability insurance, life insurance, and various other discounts and perks.SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.