← All roles

IT IAM Engineer

Panthalassa· Business Operations
Apply on company site
Portland, OR$120k - $180kfull-timePosted 2w ago

About the role

IAM Engineer responsible for owning the identity plane, administering Microsoft Entra ID and Google Workspace identity, designing Conditional Access, automating joiner/mover/leaver, and bringing SaaS applications under SSO and automated provisioning within a zero-trust framework.

Responsibilities

  • Administer Microsoft Entra ID, including user lifecycle, group management, dynamic membership rules, and role assignment.
  • Design and maintain Conditional Access policy, tying device compliance posture, identity signals, risk, and location to resource access.
  • Own authentication standards: MFA, phishing-resistant methods, passwordless rollout, and legacy auth retirement.
  • Partner with Endpoint Engineer to keep access policy and device posture in sync.
  • Automate joiner, mover, and leaver so access is granted and revoked from a source of truth rather than a ticket.
  • Manage SSO integrations and application provisioning via SAML and SCIM across our SaaS stack.
  • Build and run access review and recertification cycles that produce evidence auditors accept.
  • Implement least privilege for privileged roles, including just-in-time elevation and break-glass procedures.
  • Govern service accounts, OAuth grants, and API credentials: naming conventions, ownership, scope review, and rotation.
  • Establish where secrets live and how they are issued, stored, and retired.
  • Maintain a defensible inventory of who and what can reach our systems.
  • Advance zero trust roadmap and translate policy into enforceable technical controls.
  • Own the access control domain of our compliance framework (NIST or equivalent), including documentation and evidence.
  • Partner with information security leadership on access control policy, identity threat detection, and incident response involving compromised accounts.

Qualifications

  • Experience administering identity and access in a modern IdP, including user lifecycle, groups, and conditional or context-aware access.
  • Experience implementing SSO and provisioning integrations (SAML, SCIM) across a SaaS stack.
  • Automation experience: scripting or API work against identity and SaaS platforms rather than console-only administration.
  • Ability to write clear documentation and turn written policy into enforceable technical controls.
  • Ability to explain the reasoning behind an access decision to a non-technical audience and get buy-in.

Skills

Required:Microsoft Entra ID administrationGoogle Workspace identityConditional Access designSSO & provisioning (SAML, SCIM)Automation & scripting

Benefits

  • Flexible paid time off
  • Health insurance (company pays 100% of gold-level PPO for full-time employees, partners, and dependents)
  • Dental insurance (company pays 100% for full-time employees, partners, and dependents)
  • Vision insurance (company pays 100% for full-time employees, partners, and dependents)
  • Disability insurance (company pays 100% for long-term disability)
  • 401(k), health FSA, dependent care FSA
Last updated Oct 12, 2026. Interested? Apply on the company site.
Panthalassa logo

About Panthalassa

Go where the energy is

We're harnessing renewable energy in the open ocean and delivering it around the world. Engineered in Portland, Oregon.

Planetary-scale energyclean energy platformrenewable energyocean energypilot deploymentpublic-benefit corporation
Company profileWebsite

More open roles at Panthalassa