← All roles

Identity & Endpoint Security Engineer

northwoodspace· Information Technology
Apply on company site
Torrance, CA$120k - $190kFull-timePosted 2mo ago

About the role

Mid-level IAM/identity security engineer focusing on design and implementation of Northwood's identity architecture, with deep Okta expertise, RBAC, SSO, and compliance for hybrid environments including government workloads.

Responsibilities

  • Own Northwood's Okta environment end-to-end, including tenant configuration, application integrations, lifecycle management, MFA policy enforcement, and directory synchronization.
  • Design and maintain Northwood's SSO architecture, ensuring all corporate and government-facing applications are integrated into a consistent, auditable authentication framework.
  • Develop and enforce adaptive authentication policies, step-up MFA configurations, and risk-based access controls aligned to the sensitivity of the systems being accessed.
  • Manage Okta workflows and automation to support user provisioning, deprovisioning, and access change processes across the employee and contractor lifecycle.
  • Maintain Okta system health, audit logging, and integration reliability, ensuring identity telemetry flows into Northwood's SIEM for continuous monitoring.
  • Design and implement role-based access control frameworks across corporate systems, cloud environments, and government workloads, ensuring least-privilege access.
  • Define and maintain role taxonomies, access request workflows, and entitlement review processes satisfying CMMC, FedRAMP, and NIST 800-171 requirements.
  • Conduct periodic access reviews and certification campaigns with system owners to validate entitlements and revoke unnecessary access.
  • Develop and maintain access control documentation, including role definitions, provisioning procedures, and audit evidence for compliance.
  • Enforce segregation of duties controls across critical systems and remediate access conflicts.
  • Architect, deploy, and manage a unified Mobile Device Management (MDM) solution across macOS, Windows, Linux, and iOS/Android endpoints with secure baselines.
  • Establish OS-level hardening benchmarks (CIS, DISA STIG) across endpoints and translate to MDM policies and automated remediation.
  • Define and enforce MDM configuration profiles, compliance policies, and conditional access rules across all managed platforms aligning with security standards.
  • Lead SSO onboarding for new SaaS applications and government-facing platforms, ensuring adherence to authentication standards.
  • Evaluate and enforce SAML, OIDC, and OAuth 2.0 standards across integrated apps and remediate misconfigurations.
  • Ensure Okta log ingestion, anomaly detection, and identity-based alerting within the SIEM.
  • Support integration of identity controls with endpoint management platforms to enforce device trust in access decisions.
  • Design and maintain privileged access management controls for administrative and service accounts, including break-glass procedures.
  • Define and enforce service account governance, rotation policies, least-privilege scoping, and audit logging.
  • Collaborate on secrets management integration with identity controls and zero-trust principles.
  • Ensure IAM complies with CMMC Level 2, FedRAMP, SOC 2, and ITAR; provide audit evidence and documentation.
  • Partner with GRC for audit activities and remediation of deficiencies.
  • Collaborate on identity-aware network access controls and Zero Trust enforcement across Cloudflare and on-prem environments.
  • Develop IAM architecture documentation including data flow diagrams and access control matrices.

Qualifications

  • 3+ years of hands-on IAM engineering experience with proven Okta administration in production.
  • Deep Okta expertise: SSO, lifecycle management, MFA policy enforcement, adaptive authentication, workflows, and SIEM log integration.
  • Strong understanding of SSO protocols (SAML 2.0, OIDC, OAuth 2.0) with hands-on troubleshooting and hardening experience.
  • Experience designing and implementing RBAC frameworks and entitlements reviews/recertification processes.
  • Familiarity with privileged access management concepts, service account governance, least-privilege enforcement, and admin controls.
  • Understanding of IAM requirements within government compliance frameworks (NIST 800-171, identification/authentication controls).
  • Experience integrating identity platforms with endpoint management, cloud environments, and security monitoring tooling.
  • Ability to obtain and maintain a TS/SCI clearance; U.S. citizenship or lawful permanent resident status required for ITAR compliance.

Skills

Required:Okta administrationSAML, OIDC, OAuth 2.0RBAC/ABAC
Nice to have:Privileged Access Management

Benefits

  • equity
  • comprehensive medical, vision, and dental coverage
  • flexible spending accounts
  • flexible time off
  • 10 or more paid holidays per year
  • retirement savings plans
  • professional development opportunities
Last updated Sep 23, 2026. Interested? Apply on the company site.
northwoodspace logo

About northwoodspace

The world runs on space. We’re building the infrastructure to keep it connected.

The world runs on space. We’re building the technology to keep it connected.

spaceinfrastructureground segmenttechnology
Company profileWebsite

More open roles at northwoodspace