Senior IAM Engineer

SpaceXAI; Palo Alto, Washington, Austin (CA, District of Columbia, TX); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical, vision, dental

401(k) retirement plan

Disability & life insurance

Job summary

SpaceXAI is seeking a Senior Identity and Access Management (IAM) Engineer to design, implement, and mature our enterprise IAM ecosystem in a fast‑growing environment. You will own end‑to‑end IAM initiatives from strategy through implementation, collaborating with Security, Infrastructure, Application, and Engineering teams.

The role demands hands‑on delivery, strong ownership, and the ability to mentor others while shaping architecture across AWS, GCP, on‑prem, and SaaS.

Qualifications

• 6+ years of hands‑on experience in Identity and Access Management (IAM).
• Deep understanding of IAM principles including Zero Trust, Least Privilege, ABAC and ITDR.
• Proficiency with IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM.
• Hands‑on experience with SailPoint, Okta, PingOne, and Microsoft identity solutions.
• Strong knowledge of AWS and GCP, Cloud IAM, Terraform, and CI/CD practices.

Responsibilities

• Design and implement enterprise‑grade IAM solutions across on‑prem, cloud, and SaaS environments.
• Architect and deliver end‑to‑end federation strategies using SAML, OIDC, OAuth 2.0, and SCIM.
• Lead integration of IAM platforms (SailPoint, Okta, PingOne, Entra ID).
• Drive IAM lifecycle management (LCM), RBAC, PAM, and Just‑In‑Time access initiatives.
• Develop automation scripts and Terraform to improve provisioning and governance.
• Provide SME guidance, troubleshoot issues, and mentor team members.
• Collaborate with InfoSec, Compliance, and Engineering to meet audit and security requirements.
• Continuously improve IAM architecture in a fast‑moving org.
• Support IAM strategies across AWS, GCP, and other platforms.
• Participate in on‑call rotation and incident response for identity systems.

Skills

IAM

Zero Trust

SAML

OIDC

OAuth 2.0

SCIM

SailPoint

Okta

PingOne

Microsoft Entra ID

Terraform

CI/CD

AWS

GCP

RBAC

PAM

ITDR

ABAC

On-call

Tools

SailPoint

Okta

PingOne

Microsoft Entra ID

Terraform

CI/CD tooling

Job description

Austin, TX; Palo Alto, CA; Washington, D.C.

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands‑on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.

ABOUT THE ROLE:

We are looking for a Senior Identity and Access Management (IAM) Engineer to play a critical role in designing, implementing, and maturing our enterprise IAM ecosystem. As a Senior IAM Engineer, you will serve as a key subject matter expert (SME) within the broader Information Security organization, driving secure, scalable, and user‑friendly identity solutions in a fast‑paced, high‑growth environment. You will own complex IAM initiatives end‑to‑end — from strategy and architecture to implementation and optimization — while collaborating closely with Security, Infrastructure, Application, and Engineering teams. This is a high‑impact, hands‑on role suited for someone who thrives in ambiguity and takes extreme ownership of outcomes.

RESPONSIBILITIES:

• Design and implement enterprise‑grade IAM solutions across on‑prem, cloud, and SaaS environments.
• Architect and deliver end‑to‑end federation strategies using modern protocols (SAML, OIDC, OAuth 2.0, SCIM).
• Lead integration and optimization of key IAM platforms including SailPoint, Okta, PingOne, Microsoft Entra ID, and other tools.
• Drive Identity Lifecycle Management (LCM), Role‑Based Access Control (RBAC), Privileged Access Management (PAM), and Just‑In‑Time access initiatives.
• Develop automation scripts and Infrastructure as Code (Terraform) to improve provisioning, governance, and operational efficiency.
• Serve as the primary IAM SME, providing technical guidance, troubleshooting complex issues, and mentoring other team members.
• Work closely with InfoSec, Compliance, and Engineering teams to meet audit, regulatory, and security requirements.
• Continuously improve IAM architecture, processes, and capabilities in a dynamic, fast‑moving organization.
• Support cloud IAM strategies across AWS, GCP, and other platforms.
• Participate in on‑call rotation and incident response related to identity systems.

BASIC QUALIFICATIONS:

• 6+ years of hands‑on experience in Identity and Access Management.
• Thorough understanding of IAM principles and modern security concepts, including Zero Trust, Least Privilege, Adaptive/Risk‑Based Authentication, Attribute‑Based Access Control (ABAC), Continuous Access Evaluation, and Identity Threat Detection and Response (ITDR).
• Strong expertise in IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM, and other federation protocols.
• Strong expertise in IAM and federation protocols, with proven experience in architecting and implementing end‑to‑end federation solutions.
• Hands‑on experience with major IAM platforms, particularly SailPoint, Okta, PingOne, and Microsoft identity solutions.
• Strong working knowledge of cloud platforms (AWS and GCP), Cloud IAM services, Terraform, and CI/CD practices.
• Demonstrated ability to lead technical initiatives and drive projects from design through implementation.

This high‑visibility role requires the ability to thrive in a fast‑paced and ambiguous environment. The ideal candidate demonstrates extreme ownership, a collaborative no‑ego mindset, and is comfortable taking the lead. This is a significant opportunity to shape the future of identity and security at the company.

COMPENSATION AND BENEFITS

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long‑term disability insurance, life insurance, and various other discounts and perks.