Senior Identity Governance & Access Engineer

Impulsespace; Redondo Beach (CA); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Stock options

Medical coverage

401(k)

Job summary

Impulse Space, Redondo Beach, is seeking an Identity Governance Engineer to design, implement, and scale our enterprise IAM capabilities across cloud and on‑prem environments. You will work with IT, Security, and Engineering teams to ensure proper access controls, lifecycle management, and privilege governance.

The role emphasizes hands-on engineering with AD, Entra ID, Conditional Access, and security automation using PowerShell and APIs, while aligning with enterprise standards and regulatory

Qualifications

• 5+ years of professional relative experience
• Experience in Identity and Access Management, Identity Governance, Security Engineering, or a related discipline
• Strong hands-on experience administering and engineering Microsoft Active Directory
• Strong hands-on experience with Microsoft Entra ID / Azure AD and hybrid identity environments
• Experience managing Conditional Access, MFA, authentication methods, and privileged access
• Experience with identity lifecycle management, RBAC, least privilege, access reviews, and entitlement governance
• Experience with enterprise authentication and federation technologies such as SAML, OAuth 2.0, OpenID Connect, and SCIM
• Experience with scripting and automation using PowerShell and APIs. Working knowledge of PKI, X.509 certificates, and certificate-based authentication
• Strong troubleshooting, documentation, and communication skills

Responsibilities

• 3+ years of professional relative experience
• Maintain and enhance enterprise Identity Governance and Administration (IGA) capabilities
• Manage and improve identity lifecycle processes, including provisioning, deprovisioning, access changes, and periodic access reviews
• Maintain and enhance Microsoft Active Directory and Microsoft Entra ID, including users, groups, roles, privileged identities, and hybrid identity integrations
• Maintain and continuously improve Microsoft Entra Conditional Access, authentication methods, and identity security policies
• Support and enhance certificate-based authentication for user and device identities
• Maintain and improve Privileged Identity Management (PIM) and integrations with Privileged Access Management (PAM) capabilities
• Maintain enterprise SSO, federation, and automated provisioning integrations using technologies such as SAML, OAuth/OIDC, and SCIM
• Govern employee, contractor, partner, B2B, service account, application, and other non-human identities
• Maintain and enhance identity governance across Microsoft 365, Azure, AWS, SaaS applications, and enterprise systems
• Develop automation using technologies such as PowerShell, Microsoft Graph, REST APIs, and Python. Partner with Security Operations and Security Engineering to monitor, investigate, and remediate identity-related security risks. Maintain identity and access controls supporting organizational security and compliance requirements

Skills

Identity Governance

Active Directory

Entra ID/Azure AD

Conditional Access

RBAC

PowerShell

REST APIs

Python

SAML/OIDC/SCIM

Job description

Impulse Space, Redondo Beach, is seeking an Identity Governance Engineer to design, implement, and scale our enterprise IAM capabilities across cloud and on‑prem environments. You will work with IT, Security, and Engineering teams to ensure proper access controls, lifecycle management, and privilege governance.

The role emphasizes hands-on engineering with AD, Entra ID, Conditional Access, and security automation using PowerShell and APIs, while aligning with enterprise standards and regulatory