Identity Governance Engineer

Department: Information TechnologyLocation: Redondo BeachCompensation: $140,000 - $180,000 / yearDescriptionAs an Identity Governance Engineer at Impulse, you will maintain, enhance, and scale our enterprise identity and access management capabilities. This role will help ensure that users, devices, administrators, applications, and other identities have appropriate access throughout their lifecycle. The Identity Governance Engineer will work across Information Security, IT, Engineering, and business teams to strengthen identity governance, authentication, privileged access, directory services, and identity automation across corporate, cloud, and regulated environments. This is a hands-on engineering role for someone with strong experience in Active Directory, Microsoft Entra ID, identity governance, Conditional Access, and enterprise authentication technologies.Responsibilities3+ years of professional relative experienceMaintain and enhance enterprise Identity Governance and Administration (IGA) capabilitiesManage and improve identity lifecycle processes, including provisioning, deprovisioning, access changes, and periodic access reviewsMaintain and enhance Microsoft Active Directory and Microsoft Entra ID, including users, groups, roles, privileged identities, and hybrid identity integrationsMaintain and continuously improve Microsoft Entra Conditional Access, authentication methods, and identity security policiesSupport and enhance certificate-based authentication for user and device identitiesMaintain and improve Privileged Identity Management (PIM) and integrations with Privileged Access Management (PAM) capabilitiesMaintain enterprise SSO, federation, and automated provisioning integrations using technologies such as SAML, OAuth/OIDC, and SCIMGovern employee, contractor, partner, B2B, service account, application, and other non-human identitiesMaintain and enhance identity governance across Microsoft 365, Azure, AWS, SaaS applications, and enterprise systemsDevelop automation using technologies such as PowerShell, Microsoft Graph, REST APIs, and Python. Partner with Security Operations and Security Engineering to monitor, investigate, and remediate identity-related security risks. Maintain identity and access controls supporting organizational security and compliance requirementsMinimum Qualifications5+ years of professional relative experienceExperience in Identity and Access Management, Identity Governance, Security Engineering, or a related disciplineStrong hands-on experience administering and engineering Microsoft Active DirectoryStrong hands-on experience with Microsoft Entra ID / Azure AD and hybrid identity environmentsExperience managing Conditional Access, MFA, authentication methods, and privileged accessExperience with identity lifecycle management, RBAC, least privilege, access reviews, and entitlement governanceExperience with enterprise authentication and federation technologies such as SAML, OAuth 2.0, OpenID Connect, and SCIMExperience with scripting and automation using PowerShell and APIs. Working knowledge of PKI, X.509 certificates, and certificate-based authenticationStrong troubleshooting, documentation, and communication skillsPreferred Skills And ExperienceExperience with Microsoft Entra ID Governance, including Entitlement Management, Access Reviews, Lifecycle Workflows, and PIMExperience with Entra certificate-based authentication, Active Directory certificate authentication, 802.1X/EAP-TLS, and user/device certificatesExperience with enterprise PAM technologies. Experience governing identity and access across Azure, AWS, and SaaS environmentsExperience with B2B/external identity and non-human identity governanceExperience securing Active Directory and Entra ID against identity-based attacksExperience with SIEM and identity security monitoringExperience working in aerospace, defense, government contracting, or another regulated industryFamiliarity with CMMC, NIST SP 800-171, NIST SP 800-172, or NIST SP 800-53Additional InformationCompensation bands are determined by role, level, location, and alignment with market data. Individual level and base pay is determined on a case-by-case basis and may vary based on job-related skills, education, experience, technical capabilities and internal equity. In addition to base salary, for full-time hires, you may also be eligible for long-term incentives, in the form of stock options, and access to medical, vision & dental coverage as well as access to a 401(k) retirement plan.Impulse Space’s spacecraft manufacturing business is subject to U.S. export regulations including the International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR). This position requires applicants to be either U.S. Persons (i.e., U.S. citizen, U.S. national, lawful permanent U.S. resident (green card holder), an individual granted asylum in the U.S., or an individual admitted in U.S. refugee status) or persons eligible to obtain an export license from the U.S. Departments of State, Commerce, or other applicable U.S. government agencies. Learn more about the ITAR here.Impulse Space is an Equal Opportunity Employer; employment with Impulse Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.