← All roles

Corporate IT Security Engineer

northwoodspace· Information Technology
Apply on company site
Torrance, CAFull-timePosted 4mo ago

About the role

Mid-level IAM-focused security engineering role owning design and implementation of Northwood's identity architecture, with deep Okta expertise, across hybrid environments to support CUI, ITAR, and CMMC Level 2 compliance.

Responsibilities

  • Own Northwood's Okta environment end-to-end, including tenant configuration, application integrations, lifecycle management, MFA policy enforcement, and directory synchronization.
  • Design and maintain Northwood's SSO architecture, ensuring all corporate and government-facing applications are integrated into a consistent, auditable authentication framework.
  • Develop and enforce adaptive authentication policies, step-up MFA configurations, and risk-based access controls aligned to the sensitivity of the systems being accessed.
  • Manage Okta workflows and automation to support user provisioning, deprovisioning, and access change processes across the employee and contractor lifecycle.
  • Maintain Okta system health, audit logging, and integration reliability, ensuring identity telemetry flows into Northwood's SIEM for continuous monitoring.
  • Design and implement role-based access control frameworks across corporate systems, cloud environments, and government workloads, ensuring least-privilege access.
  • Define and maintain role taxonomies, access request workflows, and entitlement review processes for CMMC, FedRAMP, and NIST 800-171.
  • Conduct periodic access reviews and certification campaigns with system owners to validate entitlements.
  • Develop and maintain access control documentation and audit evidence for compliance assessments.
  • Enforce segregation of duties controls across critical systems and remediate access conflicts.
  • Architect, deploy, and manage a unified Mobile Device Management (MDM) solution across macOS, Windows, Linux, and iOS/Android endpoints with consistent security baselines.
  • Establish and maintain OS-level hardening benchmarks (CIS, DISA STIG) across endpoints, translating requirements to MDM policies and automated remediation.
  • Define and enforce MDM configuration profiles, compliance policies, and conditional access rules aligned with security standards.
  • Lead SSO onboarding for new SaaS apps and government-facing platforms, ensuring integrations meet authentication standards.
  • Evaluate and enforce SAML, OIDC, and OAuth 2.0 standards across applications and remediate misconfigurations.
  • Ensure Okta log ingestion, anomaly detection, and identity-based alerting within the SIEM.
  • Support integration of identity controls with endpoint management platforms to enforce device trust in access decisions.
  • Design and maintain privileged access management controls for admin, service, and break-glass accounts.
  • Define and enforce service account governance, credential rotation, least-privilege scoping, and audit logging.
  • Collaborate on secrets management integration with identity controls for zero-trust service-to-service authentication.
  • Ensure IAM environment satisfies CMMC Level 2, FedRAMP, SOC 2, and ITAR; provide audit evidence and control documentation.
  • Partner with GRC Lead on audit activities and remediation of deficiencies.
  • Collaborate with network engineering to enforce identity-aware network access controls and Zero Trust across Cloudflare and on-prem environments.
  • Develop and maintain IAM architecture documentation including data flow diagrams, integration maps, and access control matrices.

Qualifications

  • 3+ years of hands-on IAM engineering experience, with Okta administration in production.
  • Deep Okta expertise: SSO, lifecycle management, MFA, adaptive authentication, Workflows, SIEM integration.
  • Strong understanding of SSO protocols (SAML 2.0, OIDC, OAuth 2.0) and troubleshooting integrations.
  • Experience designing and implementing RBAC frameworks, entitlement reviews, and access certification processes.
  • Familiarity with privileged access management concepts and administrative access controls.
  • Understanding of IAM requirements within government frameworks (NIST 800-171, identification and authentication controls).
  • Experience integrating identity platforms with endpoint management, cloud environments, and security monitoring tooling.
  • Ability to obtain and maintain a TS/SCI clearance; U.S. citizenship or lawful permanent resident for ITAR compliance.

Skills

Required:Okta AdministrationSSO & Identity ProtocolsRBAC & Access Governance
Nice to have:Privileged Access Management

Benefits

  • The description does not list explicit benefits.
Last updated Sep 23, 2026. Interested? Apply on the company site.
northwoodspace logo

About northwoodspace

The world runs on space. We’re building the infrastructure to keep it connected.

The world runs on space. We’re building the technology to keep it connected.

spaceinfrastructureground segmenttechnology
Company profileWebsite

More open roles at northwoodspace