Senior Corporate Security Engineer — IAM & AI Automation

Trov; San Francisco, Northern (CA, KY); Hybrid; USD 210,000 - 260,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

Flexible PTO

Commuter stipend

Education stipend

Parental leave

Hybrid work model

Job summary

Pave, a San Francisco-based leader in real-time compensation data, seeks a Corporate Security Engineer to own identity, access, endpoint protection, and SaaS security across a multi-location team. You will advance SOC 2 Type II and ISO 27001 controls while automating governance with AI-driven tooling.

You’ll collaborate with IT/helpdesk and security teams in a hybrid, growth-focused environment designed to minimize toil and maximize impact. Compensation reflects experience and market norms.

Qualifications

• 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company.
• Okta administration at the design level—you've built an access model, not just operated one
• Experience operating within SOC 2 and/or ISO 27001: controls you owned passed audits
• Hands-on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
• A track record of shipped automations with concrete before/after impact
• Demonstrated, specific use of AI tooling in your own workflows
• Previous management experience (nice to have)
• Came up through IT/helpdesk into security (or similar path)
• Experience with Okta, GCP, Iru, Sentinel one, Claude code, and/or similar tools
• Vendor security review / third-party risk experience (nice to have)
• Background at a 150–500 person B2B SaaS company handling sensitive data (nice to have)

Responsibilities

• Identity & Access Management
• Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM
• Keep the RBAC model current and consistently enforced, with automation that prevents drift
• Compliance Operations
• Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end
• Automate evidence collection and user access reviews
• Own endpoint protection across a five-location, ~175-person company
• Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM
• Automation & AI
• Engineer away manual IT toil — laptop setup, onboarding/offboarding provisioning, access requests — using APIs, workflow tooling, and AI agents
• Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models
• Partnership
• Design the systems that Pave's helpdesk operates day to day; be the design counterpart that makes that team stronger and more self-sufficient

Skills

Security engineering

Okta administration

SOC 2 / ISO 27001

MDM/EDR

AI tooling

Automation

Vendor security review

People management

Tools

Okta

GCP

SentinelOne

Claude code

Job description

Pave, a San Francisco-based leader in real-time compensation data, seeks a Corporate Security Engineer to own identity, access, endpoint protection, and SaaS security across a multi-location team. You will advance SOC 2 Type II and ISO 27001 controls while automating governance with AI-driven tooling.

You’ll collaborate with IT/helpdesk and security teams in a hybrid, growth-focused environment designed to minimize toil and maximize impact. Compensation reflects experience and market norms.