Senior IAM Engineer — Federation & Cloud Automation

SpaceX Super Intelligence; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical, Vision, and Dental coverage

401(k) retirement plan

Disability insurance

Life insurance

Discounts and perks

Job summary

SpaceXSI in Palo Alto is seeking a Senior IAM Engineer to design, implement, and mature enterprise IAM across on-prem, cloud, and SaaS. You’ll own end-to-end federation, lifecycle, RBAC/PAM, and Just-In-Time access initiatives in a fast-growing environment.

You will collaborate with Security, Compliance, and Engineering, mentor teammates, and drive automation with Terraform and CI/CD to improve provisioning and governance. This is a high-impact role with ownership of identity strategy.

Qualifications

• 3+ years of hands-on IAM experience.
• Strong knowledge of IAM principles and modern security concepts (Zero Trust, Least Privilege, ABAC, ITDR).
• Proficient in SAML, OIDC, OAuth 2.0, SCIM and federation protocols.
• Hands-on with SailPoint, Okta, PingOne, and Microsoft identity solutions.
• Cloud familiarity with AWS and GCP, Terraform, and CI/CD practices.
• Python and JavaScript/TypeScript scripting for IAM workflows and integrations.

Responsibilities

• Design and implement enterprise IAM across on-prem, cloud, and SaaS.
• Architect federation strategies using SAML, OIDC, OAuth 2.0, SCIM.
• Lead IAM platforms integration and optimization (SailPoint, Okta, PingOne, Entra).
• Drive LCM, RBAC, PAM, and Just-In-Time access initiatives.
• Develop automation and IaC (Terraform) for provisioning and governance.
• Provide SME guidance, troubleshoot complex issues, and mentor team.
• Collaborate with InfoSec, Compliance, and Engineering for audits.
• Improve IAM architecture and processes in a fast-moving environment.
• Support cloud IAM strategies across AWS, GCP, and other platforms.
• Participate in on-call rotation and identity-related incident response.

Skills

IAM expertise

Zero Trust

Least Privilege

ABAC

ITDR

RBAC

Python

JavaScript/TypeScript

SAML

OIDC

OAuth 2.0

SCIM

Terraform

CI/CD

Tools

SailPoint

Okta

PingOne

Microsoft Entra ID

AWS

GCP

Job description

SpaceXSI in Palo Alto is seeking a Senior IAM Engineer to design, implement, and mature enterprise IAM across on-prem, cloud, and SaaS. You’ll own end-to-end federation, lifecycle, RBAC/PAM, and Just-In-Time access initiatives in a fast-growing environment.

You will collaborate with Security, Compliance, and Engineering, mentor teammates, and drive automation with Terraform and CI/CD to improve provisioning and governance. This is a high-impact role with ownership of identity strategy.