IAM Security Engineer — RBAC, SSO & MFA (Hybrid)

Ironclad, Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 160,000 - 190,000; Full time

Benefits offered by this job

Health coverage for employees

Parental leave

Maven family forming support

Paid time off

Wellbeing stipends

Mental health support

Pre-tax commuter benefits

401(k) with employer match

Team events

Job summary

Ironclad, Inc. in San Francisco seeks an Identity & Corporate Security Engineer to own access controls protecting people, systems, and data. You’ll work cross-functionally to ensure appropriate access while maintaining a great employee experience.

You will implement IAM tooling, enforce RBAC, and drive improvements in device trust and endpoint security in a collaborative, fast-paced environment.

Qualifications

• 4+ years of security-focused software engineering or related experience.
• Experience with IAM protocols and identity tooling.
• Strong analytical and problem-solving skills.

Responsibilities

• Support implementation and operations of our IGA platform for role-based access.
• Define and enforce RBAC standards for sensitive systems.
• Improve identity controls by reducing standing privileges and hardening auth policies (SSO, MFA).
• Lead integration of new SaaS apps into SSO and MFA ecosystem with security oversight.
• Evolve corporate device trust so only compliant devices access systems.
• Support endpoint security across macOS and Windows.
• Partner with Security Detection & Response for visibility and scripts/integrations.
• Collaborate with Trust & Compliance to streamline evidence collection for audits (SOC2).
• Conduct access reviews and resolve identity-related incidents.
• Design plans to improve access management lifecycle and identity architecture.

Skills

IAM expertise

RBAC policy enforcement

Security engineering

DevOps proficiency

Analytical thinking

Tools

Okta

Active Directory

Google Workspace

Salesforce

NetSuite

Workday

GCP

Microsoft Entra/Azure/Intune

JAMF

Job description

Ironclad, Inc. in San Francisco seeks an Identity & Corporate Security Engineer to own access controls protecting people, systems, and data. You’ll work cross-functionally to ensure appropriate access while maintaining a great employee experience.

You will implement IAM tooling, enforce RBAC, and drive improvements in device trust and endpoint security in a collaborative, fast-paced environment.