Senior Enterprise Security Engineer - IAM & AI Automation

Pave; San Francisco (CA); Hybrid; USD 210,000 - 240,000; Full time

Benefits offered by this job

Equity

Medical, dental, vision

Flexible PTO

Hybrid work model

Education stipend

Parental leave

Commuter stipend

Team Sync Fridays

Job summary

Pave, headquartered in San Francisco, seeks a Corporate Security Engineer to own identity and access management, endpoint protection, SaaS security, and corporate compliance operations behind SOC 2 Type II and ISO 27001. You will automate governance across multiple locations and helpdesk processes with AI-powered tooling.

You bring 5+ years of enterprise security, design-level Okta administration, and experience with SOC 2/ISO 27001.

Qualifications

• 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company.
• Okta (or equivalent IdP) administration at the design level — you\'ve built an access model, not just operated one
• Experience operating within SOC 2 and/or ISO 27001: controls you owned passed audits
• Hands-on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
• A track record of shipped automations with concrete before/after impact
• Demonstrated, specific use of AI tooling in your own workflows
• Previous management experience (nice to have)
• Came up through IT/helpdesk into security (or similar path), so you have empathy for the people you\’re supporting and first hand experience with the toil you\’re here to automate away
• Experience with Okta, GCP, Iru, Sentinel one, Claude code, and or similar tools
• Vendor security review / third-party risk experience (nice to have)
• Background at a 150–500 person B2B SaaS company handling sensitive data (nice to have)
• Networking fundamentals

Responsibilities

• Identity & Access Management — Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
• Keep the RBAC model current and consistently enforced, with automation that prevents drift
• Compliance Operations — Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end
• Automate evidence collection and user access reviews
• Endpoint & SaaS Security — Own endpoint protection (MDM/EDR) across a five-location, ~175-person company
• Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM
• Automation & AI — Engineer away manual IT toil — laptop setup, onboarding/offboarding provisioning, access requests — using APIs, workflow tooling, and AI agents
• Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models
• Partnership — Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient

Skills

Okta admin

IAM design

SOC 2 controls

ISO 27001

MDM/EDR

SaaS security

AI tooling

GCP

RBAC automation

Vendor risk

Networking fundamentals

Tools

Okta

GCP

SentinelOne

Claude

MDM

SIEM

Job description

Pave, headquartered in San Francisco, seeks a Corporate Security Engineer to own identity and access management, endpoint protection, SaaS security, and corporate compliance operations behind SOC 2 Type II and ISO 27001. You will automate governance across multiple locations and helpdesk processes with AI-powered tooling.

You bring 5+ years of enterprise security, design-level Okta administration, and experience with SOC 2/ISO 27001.