Senior Security Engineer, Identity and Access Management (IAM)

K2 Space Corporation·Los Angeles, CA·19 авг.

Senior Security Engineer, Identity and Access Management (IAM)

12 500 – 18 333 $

≈ 1,1 млн–1,6 млн ₽

🏢 ОфисSeniorПолная занятость

12 500 – 18 333 $≈ 1,1 млн–1,6 млн ₽

Вилки нет, про деньги придётся договариваться с нуля.

Нажмите на сигнал, чтобы увидеть, на чём он основан

Наша компания

K2 is building the largest and highest-power satellites ever flown, unlocking performance levels previously out of reach across every orbit. Backed by over $1 billion in total funding from leading investors including Altimeter Capital, ICONIQ, Kleiner Perkins, Lightspeed Venture Partners, Redpoint Ventures, and T. Rowe Price — and with over $1 billion in signed contracts across commercial and US government customers, we're mass-producing the highest-power satellite platforms ever built for missions from LEO to deep space. The rise of heavy-lift launch vehicles is shifting the industry from an

О роли

With multiple launches in 2027 and plans to scale to 100 satellites a year, we're Building Bigger — helping develop the solar system and build toward a Kardashev Type II (K2) civilization. If you are a motivated individual who thrives in a fast-paced environment and you're excited about contributing to the success of a high-growth Series D-funded company, we'd love for you to apply.

Чем предстоит заниматься

Own and mature the enterprise identity platform, including the identity provider, single sign-on, federation, and directory services across corporate, engineering, and mission environments

Design and implement authentication standards using modern protocols such as SAML, OIDC, OAuth 2.0, and SCIM, and drive adoption of phishing-resistant MFA including FIDO2 and WebAuthn

Build and automate identity lifecycle management, including joiner, mover, and leaver workflows, provisioning and deprovisioning, and just-in-time access

Design and maintain role-based and attribute-based access models, entitlement structures, and least-privilege standards for corporate and engineering systems

Implement and operate privileged access management for administrators, service accounts, and break-glass credentials

Manage machine and workload identity, including secrets management, credential rotation, and the non-human accounts used by automated pipelines and mission systems

Onboard SaaS and internal applications to SSO and automated provisioning using SCIM, REST APIs, and webhooks, retiring local accounts and shared credentials as you go

Implement conditional access and risk-based authentication policies, then tune them against real access patterns

Build and run access review and certification campaigns, producing the evidence auditors and customers require

Harden cloud IAM across AWS, Azure, or GCP, including roles, trust policies, and permission boundaries

Write code and infrastructure as code to automate identity operations rather than resolving them ticket by ticket

Partner with security operations on identity threat detection and response, including credential abuse, session hijacking, and MFA fatigue attacks, and support investigations involving identity

Serve as the identity subject matter expert in architecture and design reviews, acting as a liaison between the security team and engineering

Maintain identity documentation, runbooks, and standards, and mentor junior team members on identity engineering practices

Наши требования

5+ years of experience in identity and access management, security engineering, or infrastructure engineering, preferably in a fast-paced startup or technology environment

Hands-on experience administering an enterprise identity provider (e.g., Okta, Microsoft Entra ID, Ping, or Google Identity), including SSO, MFA, and conditional access

Strong working knowledge of identity protocols and standards, including SAML, OIDC, OAuth 2.0, SCIM, LDAP, and Kerberos

Experience designing and implementing identity lifecycle automation, RBAC or ABAC access models, and access review processes

Experience with privileged access management and secrets management for both human and machine identities, such as HashiCorp Vault or equivalent

Experience with cloud IAM in AWS, Azure, or GCP, including least-privilege role and policy design

2+ years of development experience with any modern programming language (including but not limited to Python, Go, C++, Rust) used to automate identity workflows and integrations, in lieu of a degree; OR a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline

Comfortable working with mission critical and sensitive systems, with a sense of urgency appropriate with responsibilities

Due to the high visibility of this position, excellent interpersonal skills, attention to detail, and problem-solving skills

Bachelor’s degree (or equivalent) in computer science or engineering

Identity certifications such as Okta Certified Administrator, Microsoft Identity and Access Administrator (SC-300), or CISSP, or equivalent hands-on experience

Experience managing identity resources with infrastructure as code (Terraform, CloudFormation, or CDK)

Experience with policy-as-code frameworks such as OPA or Cedar

Experience with identity threat detection and response (ITDR) and building identity-focused detections

Experience integrating modern identity with legacy or on-premise systems, including Active Directory modernization

Experience with identity and access control for engineering, manufacturing, OT, or mission and ground segment environments

Prior experience in a defense, aerospace, or other ITAR-regulated environment

Мы предлагаем

Salary will be based on several factors including, but not limited to: knowledge and skills, education, and experience level

Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks

If you don’t meet 100% of the preferred skills and experience, we encourage you to still apply! Building a spacecraft unlike any other requires a team unlike any other and non-traditional career twists and turns are encouraged!

Export Compliance

As defined in the ITAR, “U.S. Persons” include U.S. citizens, lawful permanent residents (i.e., Green Card holders), and certain protected individuals (e.g., refugees/asylees, American Samoans). Please consult with a knowledgeable advisor if you are unsure whether you are a “U.S. Person.”

Дополнительно

Base salary range for this role is $150,000 - $220,000 and equity in the company

Identity is the perimeter at K2. Every engineer, every ground and mission system, every SaaS tool and automated pipeline depends on the right people and services holding exactly the access they need and nothing more. This role owns that problem end to end: you’ll design, build, and run the identity platform that governs authentication and authorization across our corporate, engineering, and mission environments. You’ll be deeply hands-on with our identity provider, SSO and federation, phishing-resistant MFA, lifecycle automation, privileged access, and secrets management, and you’ll retire the standing access and shared credentials that accumulate in any fast-growing company. This is a role for someone who thrives on real-world impact: making least privilege the default without slowing down the teams building spacecraft. Every access path you close and every workflow you automate directly supports our ability to move fast, operate confidently, and deliver breakthrough satellite capabilities

K2 Space Corporation

Los Angeles, CA

ГрейдSenior

ЗанятостьПолная занятость

РегионНе Россия

ФорматОфис

ИсточникСкрыто

Опубликовано19 авг.

Все вакансии компании

AI-помощник

под эту вакансию

Войди, чтобы AI оценил твоё соответствие вакансии и написал сопроводительное письмо

Мы против мошенников на площадке: если тебя просят заплатить, продиктовать код или установить непонятное приложение, прекращай общение и сразу пиши нам (чат с основателем или форма обратной связи).