Senior IAM Engineer — Federation, Cloud, Automation

SpaceXSI; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Medical coverage

Vision coverage

Dental coverage

401(k) retirement plan

Disability insurance

Life insurance

Equity

Employee discounts

Job summary

SpaceXSI seeks an Identity and Access Management (IAM) Engineer to design, implement, and mature the enterprise IAM ecosystem. As a Senior IAM Engineer, you will own complex IAM initiatives end-to-end, collaborating with Security, Infrastructure, App, and Engineering teams in a fast-paced environment.

Responsibilities include federation architecture, onboarding SailPoint/Okta/PingOne/Entra, lifecycle management, RBAC, PAM, Just-In-Time access, and Terraform automation, with on-call incident

Qualifications

• 3+ years of hands-on IAM experience and modern security concepts.
• Strong knowledge of Zero Trust, Least Privilege, ABAC, and ITDR.
• Experience with SAML, OIDC, OAuth 2.0, SCIM and federation protocols.

Responsibilities

• Design and implement IAM across on-prem, cloud, and SaaS.
• Architect federation strategies using SAML, OIDC, OAuth 2.0, SCIM.
• Lead integration of SailPoint, Okta, PingOne, Entra ID.
• Drive RBAC, PAM, LCM and Just-In-Time access initiatives.
• Create IaC automation scripts (Terraform) for provisioning and governance.
• Act as IAM SME; mentor team and resolve complex issues.
• Collaborate with InfoSec, Compliance, Engineering on audits.
• Improve IAM architecture and processes in a fast-moving org.
• Support cloud IAM across AWS, GCP; participate in on-call.

Skills

IAM Expertise

SAML

OIDC

OAuth 2.0

SCIM

SailPoint

Okta

PingOne

Microsoft Entra ID

Terraform

AWS

GCP

RBAC

PAM

LCM

CI/CD

Tools

Terraform

CI/CD

Job description

SpaceXSI seeks an Identity and Access Management (IAM) Engineer to design, implement, and mature the enterprise IAM ecosystem. As a Senior IAM Engineer, you will own complex IAM initiatives end-to-end, collaborating with Security, Infrastructure, App, and Engineering teams in a fast-paced environment.

Responsibilities include federation architecture, onboarding SailPoint/Okta/PingOne/Entra, lifecycle management, RBAC, PAM, Just-In-Time access, and Terraform automation, with on-call incident