Sr. IAM Engineer

The role

This person will design, build and improve the company's enterprise identity and access management (IAM) systems across on-prem, cloud and SaaS environments. They will lead IAM projects from strategy to implementation and act as the main IAM expert, working with Security, Infrastructure, Application and Engineering teams.

What you will do

• Design and implement enterprise-grade IAM solutions across on-prem, cloud, and SaaS environments
• Architect and deliver end-to-end federation strategies using SAML, OIDC, OAuth 2.0 and SCIM
• Lead integration and optimization of IAM platforms including SailPoint, Okta, PingOne and Microsoft Entra ID
• Drive Identity Lifecycle Management, RBAC, Privileged Access Management and Just-In-Time access initiatives
• Develop automation scripts and Infrastructure as Code (Terraform) for provisioning, governance and efficiency
• Serve as primary IAM SME, troubleshooting complex issues and mentoring team members
• Work with InfoSec, Compliance and Engineering teams to meet audit, regulatory and security requirements
• Continuously improve IAM architecture, processes and capabilities
• Support cloud IAM strategies across AWS, GCP and other platforms
• Participate in on-call rotation and incident response for identity systems

Required qualifications

• 5+ years of hands-on experience in Identity and Access Management (IAM)
• Must be a U.S. citizen or national, U.S. lawful permanent resident, refugee under 8 U.S.C. § 1157, or asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. D

Nice to have

• Thorough understanding of IAM principles including Zero Trust, Least Privilege, Adaptive/Risk-Based Authentication, ABAC, Continuous Access Evaluation and ITDR
• Strong expertise in IAM protocols: SAML, OIDC, OAuth 2.0, SCIM and other federation protocols
• Proven experience architecting and implementing end-to-end federation solutions
• Hands-on experience with SailPoint, Okta, PingOne and Microsoft identity solutions
• Strong working knowledge of AWS and GCP, Cloud IAM services, Terraform and CI/CD practices
• Strong scripting in Python and JavaScript/TypeScript for IAM workflows, automation and integrations
• Demonstrated ability to lead technical initiatives from design through implementation

Benefits

• Equity
• Comprehensive medical coverage
• Vision coverage
• Dental coverage
• 401(k) retirement plan
• Short-term and long-term disability insurance
• Life insurance
• Various other discounts and perks

Before you apply

• U.S. export regulations (ITAR) limit eligibility to U.S. citizens or nationals, green card holders, refugees or asylees, or those who can obtain the required authorizations from the U.S. Department of

About the company

SpaceXSI is building Super Intelligence to help humanity understand the universe, including Colossus supercomputers, Grok models and applications such as Grok Bot, Grok Build, Grok Imagine, Grok Voice and X. The company is an equal opportunity employer.