Identity & Endpoint Security Engineer

The role

You will own the design and implementation of identity architecture and Okta administration. You will manage identity fabric, RBAC frameworks, and MDM solutions across corporate and government environments.

What you will do

• Own Okta environment including tenant configuration, application integrations, and MFA policy enforcement.
• Design and maintain SSO architecture for corporate and government-facing applications.
• Develop and enforce adaptive authentication policies and risk-based access controls.
• Manage Okta workflows and automation for user provisioning and deprovisioning.
• Design and implement role-based access control frameworks.
• Conduct periodic access reviews and certification campaigns.
• Architect, deploy, and manage a unified Mobile Device Management solution.
• Establish and maintain OS-level hardening benchmarks across multiple platforms.
• Lead SSO onboarding for new SaaS applications and internal tools.
• Design and maintain privileged access management controls.

Required qualifications

• 3+ years of hands-on IAM engineering experience.
• Demonstrated ownership of Okta administration in a production environment.
• Deep Okta expertise including SSO configuration, lifecycle management, MFA, and Okta Workflows.
• Strong understanding of SSO protocols including SAML 2.0, OIDC, and OAuth 2.0.
• Experience designing and implementing RBAC frameworks.
• Familiarity with privileged access management concepts.
• Understanding of IAM requirements within government compliance frameworks like NIST 800-171.
• Experience integrating identity platforms with endpoint management, cloud environments, and security monitoring tooling.
• Ability to obtain and maintain a TS/SCI clearance.
• U.S. citizenship or status as a lawful permanent resident required to conform with ITAR export regulations.

Nice to have

• Active TS clearance or higher.
• Experience operating Okta in AWS GovCloud or Microsoft GCC environments.
• Familiarity with Okta Identity Governance (OIG) or similar IGA platforms.
• Experience with Cloudflare Zero Trust access policies.
• Hands-on experience with privileged access management platforms such as CyberArk or BeyondTrust.
• Background in aerospace, defense, critical infrastructure, or other government-adjacent regulated environments.
• Experience supporting CMMC, FedRAMP, or SOC 2 audits in an IAM engineering capacity.
• Okta Certified Administrator, Okta Certified Professional, or equivalent identity platform certification.
• CISSP, CISM, or equivalent professional security certification.

About the company

Northwood is a modern space infrastructure company building a global network of phased array and parabolic ground stations. They design, build, and deploy scalable systems for satellite missions such as national security and global connectivity.