Space Identity Engineer: SSO, IAM & Privileged Access

Mundi; Los Angeles (CA); On-site; USD 150,000 - 220,000; Full time

Job summary

K2 Space is seeking an Identity Platform Engineer to own the enterprise IAM across corporate, engineering, and mission environments. You’ll design, build, and operate the identity provider, SSO, federation, phishing‑resistant MFA, lifecycle automation, and privileged access management while retiring standing access at scale.

The role targets 5+ years in identity/security, hands‑on IAM with providers like Okta, and strong coding for automation. Competitive compensation and equity offered.

Qualifications

• 5+ years in identity and access management or security engineering.
• Experience with enterprise identity providers and SSO/MFA.
• Knowledge of IAM protocols (SAML, OIDC, OAuth 2.0, SCIM, LDAP, Kerberos).
• Experience automating identity workflows and RBAC/ABAC.
• Experience with privileged access management and secrets management.

Responsibilities

• Own and mature the enterprise identity platform across environments.
• Design and implement authentication standards and MFA, including phishing‑resistant methods.
• Automate identity lifecycle, access models, and access reviews.
• Onboard SaaS apps to SSO and provisioning via SCIM/REST.
• Harden cloud IAM with least‑privilege roles and policies.

Skills

Identity and access management

Identity protocols (SAML, OIDC, OAuth

Education

Bachelor’s degree in computer science, engineering, or STEM

Identity certifications such as CISSP / SC-300 / Okta Certified

Tools

Okta / Microsoft Entra ID / Ping / Google Identity

HashiCorp Vault

AWS/Azure/GCP IAM

Terraform / CloudFormation / CDK

Job description

K2 Space is seeking an Identity Platform Engineer to own the enterprise IAM across corporate, engineering, and mission environments. You’ll design, build, and operate the identity provider, SSO, federation, phishing‑resistant MFA, lifecycle automation, and privileged access management while retiring standing access at scale.

The role targets 5+ years in identity/security, hands‑on IAM with providers like Okta, and strong coding for automation. Competitive compensation and equity offered.